thanks for answering my question. I have checked PHP PDO doc. PDO:: query() can send a query to server. my question is, does PDO:: query() generates prepared statement automatically? or I have to explicitly call PDO:: prepare() to use prepared statement? for example: PDO:: query("select name from contact where id = 1") will send a raw SQL statement to server, and server also treat that query as a raw SQL statement. regards -- View this message in context: http://www.nabble.com/prepared-statement-tp18123270p18142905.html Sent from the PHP - General mailing list archive at Nabble.com. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php