Use prepared statements for accessing database.