eh

rethinking it having query in a function is no the best for making sure
no outsiders try to hack in