convert to bound parameters. all types varchar for now.