Changed all Save functions to use sql parameters instead of formatted strings.