데이터베이스 보안 및 효율성을 향상시키기 위해 MySQLi 준비된 명령문을 효과적으로 사용하는 방법은 무엇입니까?

$stmt->bind_param('data_type', $variable);

$name = 'one';
$age = 1;

$stmt->bind_param('si', $name, $age);

$stmt->execute();

connect_error) {
    die('Failed to connect: ' . $mysqli->connect_error);
}

// Insertion
$stmt = $mysqli->prepare("INSERT INTO users (name, age) VALUES (?, ?)");
$stmt->bind_param('si', $name, $age);

$name = 'Bob';
$age = 30;
$stmt->execute();

// Selection
$stmt = $mysqli->prepare("SELECT * FROM users WHERE name = ?");
$stmt->bind_param('s', $name);

$name = 'Bob';
$stmt->execute();
$result = $stmt->get_result();

// Fetch and display results
while ($row = $result->fetch_assoc()) {
    printf("%s (%s)\n", $row['name'], $row['age']);
}

// Closing
$stmt->close();
$mysqli->close();
?>