highly hacky way of parameterizing some database queries...nevermind the flagrant vulnerabilities to sql-injection, eh...maybe I should put a disclaimer in the readme...forthcoming