implemented prepared statements parameters