added params to sql statements