How do you write a Prepared Statement WITH a Stored procedure??

[websoft08]

All I do is read pros and cons for both prepared statements and stored procedures, what I want to do is combine the best of each by using

 

a) Prepared statements for their security against SQL Injection

 

b) Call a Stored Procedure for their increase in speed efficiency.

 

The problem is I have no idea how to combine them together & I don't see anything good on the web that answers this. Are you supposed to put the whole prepared statement into the stored procedure or are you supposed to write the stored procedure with all the fields and then use the prepared statement which calls the stored procedure and substitute the parameters with ? , ?, ? I can't figure it out!

 

Please someone give me an example of a Stored Procedure AND a Prepared Statement that calls that stored procedure.

 

Thanks!!!!