Use MySQLi and prepared statement