#310 Use prepared statement