Replaced SQL commands with Parameterized Queries