Added 'parameter(value)' method to 'query' node to manually added parameter values to a query. If inline text added to a query includes a parameter, like '$1', then calling 'parameter(v)' allows '$1' to be set with 'v', providing protection from sql injection.