corrected parameterised qeries