[DBConnector] enhc

Now query with prepared statements. Guard agains sql injection.