I know about prepared statements and binding parameters and why you can't have the table name be a