https://remp3indir.net/python-sql-parameterized-queries/