Use a prepared statement for the FilterPatients query.