will directly query instead of prepare statement