title: Can MySQLi queries be the same as they were in MySQL when preparing?
body: <p>In PHP's MySQL, I used to format my queries like this, with grave accents and single quotes:</p>
  
  <pre><code>SELECT * FROM `Members` WHERE `Username`='JohnDoe'
  </code></pre>
  
  <p>However, in MySQLi, prepared statements are introduced, and all the tutorials or documentaries I see format queries without the single quotes and grave accents.</p>
  
  <p>Is it still safe to use my old ways of queries? Does it have an impact on security against SQL injections for stuff like below?</p>
  
  <pre><code>$mysqli = new mysqli(...);
  $st = $mysqli-&gt;prepare("SELECT * FROM `Members` WHERE `Username`='?'");
  </code></pre>
  
  <p>Or should I perform it without the `s and 's?</p>