why dbPrepareString needs a db connection element?

[kissamies]

One of dbPrepareString() required arguments are db connection. Why is that? and what does that function do with that information? this function just returns escaped quary string?

[Addlibs]

It acts differently depending on whether you're using a MySQL or sqlite connection; specifically, this is the escaping function for MySQL and this is the one for sqlite.