bind variables instead of string concatenation
bind variables instead of string concatenation

better performance by avoiding hard parses and better security by reducing sql injection possibilities

Former-commit-id: 718eb702c3aa1c2b8101b0aae0ece52d4a855f63
acliss19xx/concrete5,concrete5/concrete5,hissy/concrete5,mlocati/concrete5,mainio/concrete5,deek87/concrete5,olsgreen/concrete5,rikzuiderlicht/concrete5,biplobice/concrete5,triplei/concrete5-8,biplobice/concrete5,a3020/concrete5,concrete5/concrete5,jaromirdalecky/concrete5,jaromirdalecky/concrete5,mlocati/concrete5,haeflimi/concrete5,jaromirdalecky/concrete5,hissy/concrete5,hissy/concrete5,olsgreen/concrete5,rikzuiderlicht/concrete5,triplei/concrete5-8,MrKarlDilkington/concrete5,hissy/concrete5,mlocati/concrete5,MrKarlDilkington/concrete5,KorvinSzanto/concrete5,KorvinSzanto/concrete5,acliss19xx/concrete5,haeflimi/concrete5,KorvinSzanto/concrete5,deek87/concrete5,deek87/concrete5,mlocati/concrete5,haeflimi/concrete5,jaromirdalecky/concrete5,deek87/concrete5,biplobice/concrete5,biplobice/concrete5,triplei/concrete5-8,haeflimi/concrete5,rikzuiderlicht/concrete5,concrete5/concrete5,a3020/concrete5,mainio/concrete5,mainio/concrete5,MrKarlDilkington/concrete5,concrete5/concrete5,acliss19xx/concrete5,olsgreen/concrete5