A precompiled SQL template sent to the MySQL server once, then executed multiple times with different parameter values. Prepared statements prevent SQL injection, reduce query parse overhead, and are supported via JDBC, PDO, and other client libraries.
