SQL Injection using Emulated Prepared Statements (the default) in PHP PDO_MYSQL in GBK