Fixing DB parameterized query syntax

- Have to concatenate parameters with strings, not embed