MySQL + SQL · Lesson 102

Prepared Statements in MySQL

What is a Prepared Statement?

A prepared statement sends the SQL structure and the values separately. The database treats values strictly as data — preventing SQL injection and speeding up repeated queries.

In MySQL

PREPARE stmt FROM 'SELECT * FROM students WHERE marks > ?';
SET @m = 80;
EXECUTE stmt USING @m;
DEALLOCATE PREPARE stmt;

In PHP (PDO)

$stmt = $pdo->prepare("INSERT INTO students(name, marks) VALUES(?, ?)");
$stmt->execute(["Aman", 88]);

Summary

  • Prepared statements separate SQL from values using placeholders (?).
  • They prevent SQL injection and speed up repeated queries.
🔗

Share this topic with a friend

यह topic किसी दोस्त को भेजें

Found it useful? Send it to a classmate learning the same thing.

अच्छा लगा? जो दोस्त यही सीख रहा है, उसे भेज दीजिए।

💻 Live Code Editor

This page's programs are ready here — run them, edit them, and learn. No installation needed.
Powered by OneCompiler. The code loads into the editor automatically — press Run to see the output. If the editor does not open, open it in a new tab.