Properly Prepare SQL Statement

First, make sure we're using $wpdb to get our table names.  Also make sure we use ->prepare() to sanitize our AND statement, even though we can trust the term taxonomy ID.