Use PHP_PDO to test SQL Injection