Finish anti SQL Injection method with PDO prepared statement