PHP: mysql_* to PDO prepare