Stack Overflow Q#12188085

$query = ///base_query
$params = array();
if (...) {
  $query .= //additional_args
  $params['field'] = $value;
}

$stmt = $pdo->prepare($query);
$stmt->execute($params);
... $stmt->fetch or fetchAll