We now use prepared statements everywhere they should be used