Bugfix. Parameterized SQL