Use variable bindings for DB calls
Use bind variables for DB calls