Correct to use prepare statement.