$db = new mysqli("localhost", "root", "", "qb_test");
$query = "INSERT INTO mytable (`FirstName`, `LastName`, `Phone`) VALUES (?, ?, ?);";
$stm = $db->prepare($query);
$first = "Vasya";
$last = "Pupkin";
$tel = "123456";
$stm->bind_param("sss", &$first, &$last, &$tel);
$stm->execute();