preparing all queries to be parameterised