code.php

<?php
echo $vendorSql;
if ($debug) {
  echo "</br>term and value </br>";
  echo $term, $value[1]. '</br>';
}
$stmt->bind_param('s', $term );		


/* Error : PHP Fatal error:  Call to a member function bind_param() on a non-object in 
* /media/Yojimbo/gdrives/varun.vikram@airius*/safeview_www/www/search_indexPage.php on line 90
*/

output.html

SELECT cpe_vendor, cpe_product, count(cpe_vendor) as vendorCount FROM nvd_cpe WHERE cpe_vendor LIKE ? GROUP BY cpe_vendor, cpe_product ORDER BY cpe_product
term and value
%Supermicro%-1

The code would roughly be:

$dbh = new mysqli();
if( ! $stmt = prepare($query) ) {
    echo $dbh->error();
} else {
    $stmt->bind();
    $stmt->execute();
}

Although I tend towards:

$dbh = new mysqli();
if( ! $stmt = prepare($query) ) {
    throw new Exception($dbh->error());
}
$stmt->bind();
$stmt->execute();

So that my code does't expand out to crazy indent levels.