Sanitizing $wpdb queries using prepare get_results