问题 I'm trying to add data to a database using SQLite3 in PHP. I got it working without prepared statements but now I'm trying to make it safer. I'm not using PDO. So far the following code doesn't work. It just inserts the words ":name" and ":email" into the database, instead of what their bound values should be: $smt = $db->prepare("insert into names (name, email) values (':name', ':email')"); $smt->bindValue(':name', $var_name); $smt->bindValue(':email', $var_email); $var_name = ($_POST[post