add mysql prepared statment