http://fullstackprep.dev/Articles/webd/sql/sql-parameterized-queries