Prepared statement

Also written: db.prepare

A SQL statement written once with `?` placeholders, whose values are filled in when you run it. It keeps SQL safe from injection.