title: Is my statement fully secure enough (PDO) to prevent against malicious activity
body: <p>is this all i need to protect myself from sql injections etc?</p>
  
  <pre><code>    $statement = $db-&gt;prepare(
  "INSERT INTO blogs (blogtitle, blogdesc, coverimage, userID, frontpage, tags) 
  VALUES (:buildtitle, :builddesc, :buildcover, :userid, :frontpage, :addtags)"
  );
  
  if ($statement-&gt;execute(array(
  ':buildtitle' =&gt; $_POST['addbuildtitle'], 
  ':builddesc' =&gt; $_POST['addbuilddesc'], 
  ':buildcover' =&gt; $_POST['addbuildcover'], 
  ':userid' =&gt; $_POST['adduserid'], 
  ':frontpage' =&gt; $frontpage,     
  ':addtags' =&gt; $_POST['addtags'])));
  </code></pre>
  
  <p>Anything else i should add or any other type of malicious activity i should be aware of?</p>