title: Pass multiple parameters in PDO
body: <p>My PHP looks like this:</p>
  
  <pre><code>$diagSel = $_POST['diagSel'];
  $search_crit = $_POST['criteria']; //this is an entry like "85054,85206" (no quotes)
  $sql1 = "SELECT * FROM `myTable` where`Diagnosis` = :diagnosis and `zip_code` in (:placeHolder) group by `Provider Number`";
  $stmt = $dbh-&gt;prepare($sql1);
  $stmt-&gt;bindParam(':diagnosis', $diagSel, PDO::PARAM_STR);
  $stmt-&gt;bindParam(':placeHolder', $search_crit, PDO::PARAM_STR);
  $stmt-&gt;execute();
  $result1 = $stmt-&gt;fetchAll(PDO::FETCH_ASSOC);
  header('Content-type: application/json');
  echo json_encode($result1);
  </code></pre>
  
  <p>Here's the problem...if the user enters multiple ZIP Codes (passed in <code>criteria</code>) that are comma separated, this <code>ECHO</code>s nothing. If they enter a single ZIP Code, it returns exactly what I'd expect. </p>
  
  <p>Is there a way to pass a comma separated value by PDO such as 85054,85206 using prepared statements?</p>
  
  <p>Thanks.</p>