Can you use a prepared statement here?