90% of example code for PDO uses prepared statements. 90% of example code for the mysql_* functions is ancient and full of security holes.