Exercise about queries and prepared statements in PHP