using proper mysql binding