the currency should also be configurable. and the query should use a prepared statement.