added mysql prepare statements