Use named parameters like :st, :comm, :comments in your query, then...
$db->prepare($query)->execute($_POST);
KISS - keep it stupid simple.
Use named parameters like :st, :comm, :comments in your query, then...
$db->prepare($query)->execute($_POST);
KISS - keep it stupid simple.