Advantages of using prepared statements over normal mysqli statements?

Question

I have done my research and have decided to use prepared statements in my queries, all I ask if there is anything I should know, good or bad about switching to normal mysqli

Answer 1

There are at least two advantages :

• You don't have to deal with escaping values : it's done automatically (when using bound parameters, of course)
• The statement is sent to the SQL server, prepared only once ; and, then, can be executed several times -- which is great for performances (the statement is parsed only once, even if executed lots of times)