PDO and security

我今天早上遭到攻击，在我的网站中注入了一些JS。我正在努力找出漏洞并修补它。我觉得下面的PDO是安全的，有人能证实还是否认这一点？

        //Adding the lead to the local database
        $leads = array($firstName, $lastName, $company, $state, $country, $phone, $email, $industry, $uniqueId, $comments );
        $qry = $dbh->prepare(
            'INSERT INTO leads (FirstName, LastName, Company, State, Country, Phone, Email, Industry, Solution, Comments) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)');
        if(!($qry->execute($leads))) {
            print_r($dbh->errorInfo());
        }