Use prepared statements instead of regular queries