Parameterized queries

@avram For you, my friend.
Ah, I hadn't noticed the initial asterisk. In that case, you're missing a period.