I assume that apps. is his database binding ... and, for what it may be worth, I strongly recommend that you do use bound parameters.   Basically, I advise that you replicate that example exactly as-given.   Here we have the voice of a very-experienced Roman ... and you are in Rome, so do what they do.