Why are you still using db_param() here?