Leewillis, I am assuming you're being serious. Are you familiar with second order injections? Have you read the C code that makes the prepare() function? Prepare is not secure.