$stmt = $conn->prepare($sql);