Always use placeholders in prepared query statements, req in 3.9