changed usage of wpdb::prepare to wordpress standard