Bug 6452: Use placeholders in sql