Why is it important to use the php quote function on user generated input before passing it in as a variable to a SQL statement?

Prepared statements with bound parameters are not only more portable, more convenient, immune to SQL injection, but are often much faster to execute than interpolated queries, as both the server and client side can cache a compiled form of the query.

the save and close button