g/escaping, and thus with much
   less risk of SQL-injection attacks.
  </p><p>
   Similar results can be achieved with <code class="function">SPI_prepare</code> followed by
   <code class="function">SPI_execute_plan</code>; however, when using this function
   the query plan is always customized to the specific parameter values
   provided.
   For one-time query execution, this function should be preferred.
   If the same command is to be executed with many different parameters,
   either method might be f