Two things:

• Drop the single quotes around the ? mark to make the syntax right
• As you use count in your SQL statement, you will always get one row back, thus checking the size of result set makes no sense, simply use the count you get.