First pass at paramaterized SQL statements
Second pass: search and others