php+mysqli使用预处理技术进行数据库查询的方法

<?php
$mysqli = new MySQLi("localhost","root","123456","liuyan");
if(!$mysqli){
 die($mysqli->error);
}
//创建一个预定义的对象 ?占位
$sql = "select id,title,contents from news where id>?";
$mysqli_stmt = $mysqli->prepare($sql);
$id=10;
//绑定参数
$mysqli_stmt->bind_param("i",$id);
//绑定结果集
$mysqli_stmt->bind_result($id,$title,$contents);
//执行
$mysqli_stmt->execute();
//取出绑定的结果集
while($mysqli_stmt->fetch()){
 echo "--$id--$title--$contents--<hr>";
}
//关闭结果集
$mysqli_stmt->free_result();
$mysqli_stmt->close();
$mysqli->close();
?>