Prepared Statement

SQL with placeholders filled in safely later.

A prepared statement is compiled once and executed with bound values, which prevents SQL injection.