Do I need to use prepared statement for the data I'm getting from database?
<p>I have a query like this:</p>

<pre><code>$result = $db
-&gt; prepare("SELECT value FROM mytable WHERE id = ?")
-&gt; execute(array($id))
-&gt; fetch(PDO::FETCH_ASSOC);
</code></pre>

<p>And I want to use <code>$result['value']</code> as a parameter for another query <em>(an <code>UPDATE</code> statement)</em>. Should I use prepared statement for that <code>UPDATE</code> statement? Or because I've taken it from database, then no need to pass it as prepared statement?</p>