Side comments on the SQL itself.

The first query might benefit from qualifying the columns names (with the table names.) Right now, it only qualifies those that are ambiguous, which is fine. Qualifying all of them helps with readability and consistency.

The second query uses dynamic SQL. Considering the query is being prepared anyway, perhaps you can change the variables to placeholders and specify their values in the execute().