uses JDBC's Prepared Statement, and does not provide SQL commands for dynamic SQL.