使用Prepared Statements时我应该使用real_escape_string吗? [重复]

This question already has an answer here:

The title says: should I use mysqli real_escape_string when using prepared statements?

Is it necessary, better for the security, overkill, doesn't make any sense, or...?

</div>

Assuming you mean "For data that will be inserted using placeholders": No. You'll end up double escaping the data (so you'll insert the escape sequences from mysqli_real_escape_string as data).