Are prepared statements against SQL injection in ORDER BY?

Someone told me the other day that “prepared statements can be 100% against SQL Injection”. But, is it true? In this section, we’ll explain how prepared statement can against SQL injection in some case and explain how prepared statement can NOT again...