MySQL fix

All non alphanumeric chars are removed from the pdo placeholders