updated ListItem._update to use prepared MySQL statements