dynamically creating SQL statements. Still need to dynamically bind parameters.