It would be nice to make use of prepared statements in the mysqli driver (the PHP ext supports this). Currently Perpare() only returns the SQL-statement and does not prepare it.