PHP

<?php

   function query( $sql, $params = null )
    {
 $conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
    // set the PDO error mode to exception
    $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        if ( $params ) {

            $stmt   = $dbConn->prepare( $sql );
            $stmt->execute( $params );
            $result = $stmt;
        }
        else {
            $result = $dbConn->query( $sql );
        }

        return $result;

    }

  $to = 'tancerz1@o2.pl';
  $subj = 'Wiadomość od użytkownika Carmen Studio Tańca';
  $form_fields = array('name', 'email', 'message');

  include 'includes/db.php';
  if(isset($_POST['submit_form'])){

    foreach ($form_fields as $field) {
    $form[$field] = htmlspecialchars($_POST[$field]);
  }

    $message = "Imię i Nazwisko: " . $form['name'] . "\n";
    $message .= "Email: " . $form['email'] . "\n";
    $message .= "Wiadomość: " . $form['message'];

    $headers = "From: www.studiocarmen.pl <tancerz1@o2.pl>\r\n";
    $headers .= "X-Sender: <tancerz1@o2.pl>";

    mail($to, $subj, $message, $headers);

    $ins_sql = query("INSERT INTO Users (name, email, message) VALUES (name=:name, email=:email, message=:message)",array('name'=>$_POST[name],'email'=> $_POST[email],'message'=> $_POST[message]));
    $run_sql = mysqli_query($conn, $ins_sql);
  } else {
    foreach ($form_fields as $field) {
    $form[$field] = '';
    }
  }



 ?>