PDO prepared statement to insert data into MySQL
Yes, you did everything right, save for the obvious typo with the extra parameter. You can keep with it all right. 

The only improvement (which is the point of this site) I can think of is that you can make this code less bloated, with help of positional placeholders.

$sql = "INSERT into pools (profileid, name, description) values (?,?,?)";
$pdo-&gt;prepare($sql)-&gt;execute([$profileid, $name, $description]);
redirect_to('/my-pools');


To my taste, this is the most clear and readable approach: now it fits onto screen without horizontal scrolling and you still can visually control the parameter order.