Here is a nice article explaining mysqli, including prepared statements.

So, the question is, how do you use a prepared statement when the number of parameters is variable? I think the answer is here, but I have to study it.