Using Parameterized Queries: A Safer and More Efficient Way to Handle User Input in LIKE SQL Statements