kept consistency with bindParam on potentially dangerous data