Description:
------------
I get the following PDOException when executing a prepared statement:
SQLSTATE[HY093]: Invalid parameter number: parameter was not defined

This behaviour changed in PHP after version 5.2.0 and a related issue #40417 exists.

However, nothing in the documentation specifies that you can't bind MORE variables than are used in the SQL. For example if you call $statement->execute($_POST), you might bind more variables than are used in the SQL.

Test script:
---------------
$params = array(':key1' => 'value1', ':key2' => 'value2');
$stmt = $db->prepare('SELECT * FROM table WHERE id=:key1');
$stmt->execute($params);

Expected result:
----------------
I expect this to succeed. We relied on this feature in much of our old code working up to PHP version 5.2.0, but have made a workaround in our DB layer which parses the SQL.

Actual result:
--------------
PDOException: SQLSTATE[HY093]: Invalid parameter number: parameter was not defined