switching from the prepared statements to parameterized statements