implemented preparedStatement and a sqlbuilder