Use prepared statement placeholders