A few things:

• Check the result of your prepare.
• Check the result of your execute.
• Don't quote placeholders.
• Why check the number of rows returned (which might not even available until all rows have been fetched)if you are doing a count (*)?
• Why quote the -1 you are returning?

Abigail