绑定在php与postgres

Question

我有绑定问题，我想在标签Pisatelj中插入名称或姓氏作为搜索此作者的关键字， 如果我为Naslov插入关键字，我也想做同样的方式（=书名） 请更正我的代码 我在php中使用postgres有这个代码：

function get_knjige_sql ( )
{
    global $CRUD;
    $dbh = $CRUD['dbh'];
        $str_query = '';
        if(isset($_POST['Knaslov'])){
                $str_query = addslashes($_POST['Knaslov']);
        }
        if(isset($_POST['Ppriimek'])){
                $str_query = addslashes($_POST['Ppriimek']);
        } 

    $query = " SELECT *  FROM knjiga, pisatelj, zaloga WHERE (knjiga.naslov ILIKE '?' OR CONCAT(pisatelj.ime, ' ', pisatelj.priimek) ILIKE '?' ) AND knjiga.p_id = pisatelj.p_id AND knjiga.k_id = zaloga.k_id AND zaloga.prodana = false ";
    if($sth)
    $sth->bindValue(':Knaslov', $Knaslov, PDO::PARAM_STR);
    $sth->bindValue(':Ppriimek', $Ppriimek, PDO::PARAM_STR);
    if($sth)
    $sth->execute();

    else error('get_knjige_sql: select prepare returned no statement handle');

    $err = $sth->errorInfo();
    if($err[0] != 0) error( $err[2] );

    return($sth);
}

main.php：

<!-- main html file for CRUD (php version) -->
<?php echo $CRUD["MESSAGES"] ?><?php echo $CRUD["ERRORS"] ?>
<div class="form">
<form action="<?php echo $CRUD["SELF"] ?>" method="post" name="knjiga">
    <p class="subheading"><?php echo $CRUD["FORM_HEAD"] ?></p>

    <table class="form">
    <tr>
        <td><p class="Afield"> Naslov:</p></td>
        <td><input class="Afield" type="text" name="Knaslov" value="<?php echo $CRUD["Knaslov"] ?>"> </td>
    </tr>
    <tr>
        <td><p class="Afield"> Isbn:</p></td>
        <td><input class="Afield" type="text" name="kisbn" value="<?php echo $CRUD["Kisbn"] ?>"> </td>
    </tr>
    <tr>
        <td><p class="Afield"> Cena:</p></td>
        <td><input class="Afield" type="text" name="Kcena" value="<?php echo $CRUD["Kcena"] ?>"> </td>
    </tr>
    <tr>
        <td><p class="Afield"> Pisatelj:</p></td>
        <td><input class="Afield" type="text" name="Ppriimek" value="<?php echo $CRUD["Pime"] ?><?php echo $CRUD["Ppriimek"] ?>"> </td>

    </tr>

    <tr class="buttons"><td colspan="2">
<p class="buttons">
<?php echo $CRUD["BUTTONS"] ?><?php echo $CRUD["HIDDENS"] ?>
</p>
    </td></tr>
    </table>


</form>
</div>
<?php echo $CRUD["PRECONTENT"] ?><?php echo $CRUD["CONTENT"] ?><?php echo $CRUD["POSTCONTENT"] ?>