test on update queries: prepared statements vs queries