working on using prepared statements.