如何在准备声明中使用“IN”

I send id to client side and then I collect each id to resend these ids string to server like "&before_ones=1,23,4,523,42,3" then I get this ids and I write NOT IN(?) with binding to $_GET['before_ones'] but it doesnt work(this is really complex query in the behind thats why I have not another way).Also I can do IN(before_ones) but there will be sql injection and I dont want to use mysqli_real_escape string. I created my Dynamicly binding system it works perfectly but my problem is only with prepare statement itself with IN operatorHow I can use IN with prepare in this case?