use prepared statements, in particular for the limit and offset