prepare($sql); $stmt->execute(array($cid)); ?>