Answer 1

Use PDO. The top reason web applications get hacked is because of sql injection. PDO prevents this wonderfully while mysqli doesn't as much. Also, PDO supports switching to a different database more easily, while you are stuck with mysql when using mysqli.
It's newer and better.