= ?'; $stmt = $db->prepare($sql); $stmt->execute(array($_SESSION['user'], $_POST['d'], $_POST['d'])); // print_r($stmt->fetchAll()); ?>