有没有更干净的方法?(Qt C++中的SQL查询)

我正在使用QSqlQuery::prepare()和::addBindValue()处理我正在处理的Qt项目中的查询。有很多重复的代码,虽然我认为这是“正确的”方式,我想确保。也许有人有别的想法?例子:

QSqlQuery newQuery;
newQuery.prepare("INSERT INTO table "
                 "(foo,bar,baz,"
                 "herp,derp,biggerp,"
                 "alpha,beta,gamma,"
                 "etc) VALUES "
                 "(?,?,?,"
                 "?,?,?,"
                 "?,?,?,"
                 "?)");
newQuery.addBindValue(this->ui->txtFoo->text());
newQuery.addBindValue(this->ui->txtBar->text());
newQuery.addBindValue(this->ui->txtBaz->text());
newQuery.addBindValue(this->ui->txtHerp->text());
newQuery.addBindValue(this->ui->txtDerp->text());
newQuery.addBindValue(this->ui->txtBiggerp->text());
newQuery.addBindValue(this->ui->txtAlpha->text());
newQuery.addBindValue(this->ui->txtBeta->text());
newQuery.addBindValue(this->ui->txtGamma->itemText(0));
newQuery.addBindValue(this->ui->txtEtc->text());
newQuery.exec();

你可以看到有很多相同的newQuery.addBindValue(这个->用户界面->\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\。这是最好的方法吗?

另外,前几天晚上我在freenode上的qt中问了一个问题,但没有得到明确的答案;上面的(::prepare with::addBindValue)是否会保护agains SQL注入?参考文献并没有说。