sharing: correctly use prepared statement