Prepared statements(mysqli & pdo)

参考：

http://php.net/manual/en/mysqli.quickstart.prepared-statements.php

http://www.ultramegatech.com/2009/07/using-mysql-prepared-statements-in-php/