Using prepared statements

addslashes