prepare("SELECT * FROM products WHERE $where ORDER BY name ASC"); $stmt->execute($params); $products = $stmt->fetchAll(); ?>