Changed query() call to prepare() to protect from user input
Added 'description' as a value to each park