title: Is mysql_real_escape_string() necessary when using prepared statements?
body: <p>For this query, is necessary to use <code>mysql_real_escape_string</code>? </p>
  
  <p>Any improvement or the query is fine ?</p>
  
  <pre><code>$consulta = $_REQUEST["term"]."%";
  
  ($sql = $db-&gt;prepare('select location from location_job where location like ?'));
  
  $sql-&gt;bind_param('s', $consulta);
  $sql-&gt;execute();
  $sql-&gt;bind_result($location);
  
  $data = array();
  
  while ($sql-&gt;fetch()) {
      $data[] = array('label' =&gt; $location);
  }
  </code></pre>
  
  <p>The query speed is important in this case.</p>