我想知道如何将此查询转换为准备好的语句。我是否必须将两者转换为一个准备好的语句（最好的情况是，如果你知道面向对象的样式，但另一个也可以…）？我完全不知道如何做到这一点，因为通常你会在准备好的语句中立即获取数组，这样你就可以关闭它们，不是吗？
如果没有办法，你有什么办法吗？
php:
$queryinquery = "SELECT `followed` FROM `follows` WHERE `follower` = '$username'";
$query1 = mysqli_query($db, "
SELECT * FROM `whatever` WHERE `id` IN ($queryinquery) ORDER BY `id` DESC LIMIT 10;
");
试试这个。
<?php
$servername = "localhost";
$username = "username";
$password = "password";
$dbname = "myDB";
// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);
// Check connection
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
// prepare and bind
$stmt = $conn->prepare("SELECT * FROM `whatever` WHERE `id` IN (SELECT `followed` FROM `follows` WHERE `follower` = ?) ORDER BY `id` DESC LIMIT 10");
$stmt->bind_param("s", $username);
// set parameters and execute
$username= "John";
$stmt->execute();
// fetch your data code here
$stmt->close();
$conn->close();
?>