PHP & MySQL Prepared Statements

[pengu]

I swear I had read a tutorial on this site, but I must be mistaken as I can't find it.

 

I did some googling on it.. but not to happy with the tutorials.  Just wondering if someone could point me in a better direction.

 

I'm wondering if I can take advantage of these.  Like if I put these in a "config" file that is called on every PHP page and I have 2 or 3 SQL queries that I always want to run, a SELECT and UPDATE (maybe a delete).  I could call these at will.. right?  Without having to rewrite the query a million times?

 

Any help is most appreciated.

[trq]

SQL queries are just strings, so store the strings in your config file and include it.

 

Prepared statements are something all together entirely different.

[pengu]

I know I could do it that way. But..

 

Any point in using Prepared Statements? (Security wise)

[trq]

it's always better to use prepared statements where possible as they can help enforce data types.

[pengu]

it's always better to use prepared statements where possible as they can help enforce data types.

 

Thanks.

Know any decent tutorials?