more work on parameterized query