server: fix PDO error in host_update()

Apparently native prepared statements can't deal with duplicate parameters like that.
server: add some error checking