Skip to content

Glossary: PHP Basics

prepared statement

Also written: prepared statements

SQL sent with placeholders (`?` or `:name`) whose values are supplied separately, so input can never be read as SQL. It stops SQL injection.

Where the book teaches it

Related terms

placeholderSQL injection