The error he showed seemed to say that REF(0xaaa3700) was actually part of the query string, no doubt because he passed the parameters as references.