php - 这些使用 PHP 和 MYSQL 的准备好的语句有什么区别吗？

Question

$q = $dbc -> prepare ("INSERT INTO accounts (type, username, gender, email, password) VALUES (?, ?, ?, ?, ?)");
$q -> bind_param('sssss', ($_POST['type']), ($_POST['username']), ($_POST['gender']), ($_POST['email']), ($_POST['password']));

$q -> execute();

相比于；

$type = $_POST['type'];
$username = $_POST['username'];
$gender = $_POST['gender'];
$email = $_POST['email'];
$password = $_POST['password'];

$q = $dbc -> prepare ("INSERT INTO accounts (type, username, gender, email, password) VALUES (?, ?, ?, ?, ?)");
$q -> bind_param('sssss', $type, $username, $gender, $email, $password);

$q -> execute();

这两种方式都有什么好处吗？

谢谢。

Answer 1

它们都是一样的，哪个更好取决于你发现哪个更容易阅读和维护。