Laravel默认使用Prepared Statements吗？

Question

I'm somewhat new to Laravel and this is just a quick question, does Laravel use prepared statements by default so I don't have to worry about using them? Basically, does this statement (to use the example from the Laravel website):

DB::insert('insert into users (id, name) values (?, ?)', array(1, 'Dayle'));

use prepared statements automatically? Or if I want the security that comes with prepared statements will I have to do them manually? It seems like it does because of the question marks where where the values would be but I just wanted to double check before just making that assumption and making an unnecessary security mistake.

Answer 1

Have a look at Connection.php.

Search for the insert method which eventually will leads you to:

$statement = $me->getPdo()->prepare($query);