Opps, this was midway through some refactoring.
Suppress Code Analysis message...

We gotta trust the caller to make use of parameters and not build the
sql statement directly from user input.
move old file out of project folder
Better test? for nullable int