Ciao,

usa bindParam di PDO https://www.php.net/manual/en/pdostatement.bindparam.php#example-1074