single line of prepare and sql