結果 : sql prepared statement vs parameterized query