The sad part is many libs force you to accept prepared statements with your parameters or you get no parameters at all.