I think we need to see more code. Somewhere, somehow, you are generating the string to pass to prepare(), and it is probably possible to rewrite how you are doing that. What does getQuery() look like? (From the above, it would have to return the string.)