For readability and in accordance with our coding guidelines, I would prefer to see the SQL assigned to a variable rather than built straight into the db_query_bound() function call.