preparedstatements and input fixded