Meaning of this error

Once you’re able to make it work, you might want to use prepared statements to prevent SQL injections. Here’s the official doc: http://php.net/manual/en/mysqli-stmt.bind-param.php