continued to replace with prepared statements