need to pass parameters to the prepare statements