added comment about prepare statement for database