BZ-996000 using parameters in a safe way