changed from mysql to PDO and data binding