bindParam better than execute(array(