PHP - Passing Arabing Paramters With .htaccess

Normally this is how I do my query. I am binding min, max and featured parameters like this.

$min_price = 10;
$max_price = 50;
$featured  = 1;

$find_records = $db->prepare("SELECT * FROM projects WHERE min_price >= :min_price AND max_price <= :max_price AND featured = :featured");
$find_records->bindParam(':min_price', $min_price);
$find_records->bindParam(':max_price', $max_price);
$find_records->bindParam(':featured', $featured);
$find_records->execute();
$result_records = $find_records->fetchAll(PDO::FETCH_ASSOC);

Now I was wondering if it's ok to do the same thing but like this? I am adding the parameters directly in the query. Would it be prone to SQL injection?

$min_price = 10;
$max_price = 50;
$featured  = 1;

$find_records = $db->prepare("SELECT * FROM projects WHERE min_price >= $min_price AND max_price <= $max_price AND featured = $featured");
$find_records->execute();
$result_records = $find_records->fetchAll(PDO::FETCH_ASSOC);

Hi can someone help me

i have this .htaccess code

Supposed i have

RewriteRule ^([a-zA-Z0-9-z\-]+)/([^.]+)/([a-zA-Z0-9-z\-]+)$ index.php?Active=$1&PostID=$2&PostName=$3 [L]

this line wont work 

##RewriteRule ^([a-zA-Z0-9-z\-]+)/([^.]+)$ index.php?Active=$1&PostCell=$2 [L]

so i commented it

i need to make them both work for pretty urls

Options -Indexes
Options +FollowSymLinks -MultiViews

RewriteEngine On

ErrorDocument 404 /404.html
ErrorDocument 401 /404.html
ErrorDocument 403 /404.html
ErrorDocument 404 /404.html
ErrorDocument 500 /404.html

RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} /(.*)/$
RewriteRule ^ /%1 [R=301,L]


RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-l
RewriteCond %{DOCUMENT_ROOT}/$1 -f
RewriteRule ^[^/]+/([^.]+\.(?:js|css|jpe?g|png|gif))$ /$1 [L,R=301,NC]

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^([a-zA-Z0-9-z\-]+)/?$ index.php?Active=$1 [L]
##RewriteRule ^([a-zA-Z0-9-z\-]+)/([^.]+)$ index.php?Active=$1&PostCell=$2 [L]




RewriteRule ^([a-zA-Z0-9-z\-]+)/([^.]+)/([a-zA-Z0-9-z\-]+)$ index.php?Active=$1&PostID=$2&PostName=$3 [L]

Thank you in advanced.

Hi people

i have this link

http://localhost/ViewCategory/PHP

my problem is everytime i put / from PHP/

it will redirect me to Access forbiden

andd return me this

http://localhost/C:/xampp/htdocs/index.php?Active=ViewCategory&PostCategory=PHP/

how to fix it 

this is how my htaccess code

  Options -Indexes

RewriteEngine On


RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-l
RewriteCond %{DOCUMENT_ROOT}/$1 -f
RewriteRule ^[^/]+/([^.]+\.(?:js|css|jpe?g|png|gif))$ /$1 [L,R=301,NC]

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^([a-zA-Z0-9-z\-]+)/?$ index.php?Active=$1 [L]
RewriteRule ^([a-zA-Z0-9-z\-]+)/([^.]+)$ index.php?Active=$1&PostCategory=$2 [L]

Hi how can I make this URL clean

http://localhost/?Active=View&PostCategory=1

i want to remove the ?,&, = make them into /

this is the php code that manipulate the link

<?php
Class ControlURL{


    public static $_page = "Active";
    public static $_folder = Web_Body;
    public static $_params = array();


    public static function cPage() {
        if(isset($_GET[self::$_page])){
            return $_GET[self::$_page];
        }else{
            return 'index';
        }
    }


    public static function getPage() {
        $page = self::$_folder.DS.self::cPage().".php";
        $error = self::$_folder.DS."error.php";
        if(is_file($page)){
            return $page;
        }else{
            return $error;
        }
    }


}