There is no excuse to concatenate the id into the query string, but the first parameter, the table prefix is not something you can do with parametrized queries.

There is no excuse to concatenate the id into the query string, but the first parameter, the table prefix is not something you can do with parametrized queries. There are probably better ways to abstract this, but in the end if you need to dynamically determine the tables or columns you have to concatenate that stuff into your SQL query string.