Use PreparedStatement instead of Statement