video #39 - Advance PHP | Basic MYSQLI

We will discuss basic mySQL connection, mysql_fetch_array function, “prepare” statement. When you prepare an SQL statement, you can insert a placeholder (?) - where a column value would go.

Then we use the “bind_param()” to safely substitute the placeholder for the real column's value. This prevents any possibility of an SQL injection.