database parameterization fix..