As seen here:
The code performs count() on a PDOStatement, but PDOStatement's are not countable objects. On PHP 7 this will emit an error. On PHP 5 this will always result in a true statement (because count() on an object that does not implement Countable always returns 1)
As seen here:
articles-code/sql-injection/fixed-code/form-handler.php
Line 12 in 5b94f42
The code performs count() on a PDOStatement, but PDOStatement's are not countable objects. On PHP 7 this will emit an error. On PHP 5 this will always result in a true statement (because count() on an object that does not implement Countable always returns 1)