All of these can be condensed into a single parameterized query (also known as a prepared statement), as shown in Listing 2.
所有这些查询可以简化为一个参数化查询(也称为一个预准备语句)，如清单2所示。
The good practice is to parameterize a query, which allows the query to be parsed or prepared only once, cached, and reused. So a better way to write the query is to use a named parameter
良好实践是参数化查询，从而仅解析或准备查询一次，然后再缓存并重用它。
Run the SQL query in the prepared statement with the execute ([array input_parameters]) function.
用execute ([array input _ parameters])函数执行预置语句中的SQL查询。
应用推荐