Use prepared statements for update