Should this parameter be interpolated into the string, or passed in a parameterized query?