utf8 works now, parameterized query