Is the variable/array on the PDO execute also prepared?
<p>In the below, I would be speaking of $val1. Is $val1 also prepared?</p>

<pre><code> $sql = "SELECT * FROM table WHERE col1=:var1 LIMIT 1";
 $q = $conn-&gt;prepare($sql);
 $q-&gt;execute(array(':var1'=&gt;$val1));
</code></pre>
