[cosmok]

Very easy in PHP. http://php.net/manual/en/pdo.prepared-statements.php

[damncabbage]

Except when the database drivers PDO relies on aren't set up by default:

http://news.ycombinator.com/item?id=2376873