I'm completely new to SQLite and its API and I'm wondering what the preferred method is for making SQL statements with user input parameters. It seems easier to just do sqlite3_mprintf to generate a ...