Prepared statements, made in a not so prepared way