Well depending on what's in your $vars, it could break your SQL if it contains ? or a quote. more on this

The other reason is that you don't have to keep preparing a statement over and over. The poster could move the prepare outside of both foreach loops and only prepare it once. Over thousands of iterations, this can make a noticable difference.

-Lee

"To be civilized is to deny one's nature."