Updating db_user_handle to use parameterized queries instead of concatenation.