You should use bind variables instead of directly inserting php variables in your SQL. You're just opening yourself up for SQL injection.
>> WHERE poll_id != '$poll_id'
However, in Correlated's case, it's not really an issue, because SQL injection is only a problem when $poll_id is a user input. But this particular query is only run by a user-inaccessible script.