direct sql data access : parameterized queries - added comments