Bound parameters

Say no to sql injections