check for iolist as sql and with prepared statements