Prepare the statement for executing query to prevent sql injection
Prepare the statement for executing query to prevent sql injection