You have an error in your SQL syntax;

Have you printed out your SQL and inspected it for errors?

Does the SQL work when manually pasted into the MySQL command line interface, with the placeholders replaced by the values?