secure PHP data objects for SQL