udpate DB call to be fully parameterized