Why is using a mysql prepared statement more secur

Question

There's a comment in another question that says the following:

"When it comes to database queries, always try and use prepared parameterised queries. The mysqli and PDO libraries support this. This is infinitely safer than using escaping functions such as mysql_real_escape_string."

Source

So, what i want to ask is: Why are prepared parameterized queries more secure?

Answer 1

Very best case, it might not be, but it's at least equally safe; and why take the chance?