Securing PHP Applications: Stopping SQL Injection with Prepared Statements
One line of careless PHP is all it takes. A login form that drops a username straight into a query string,
database security
How to Migrate from mysql_* to PDO in PHP for Better Security
You upgrade a server, run your app on PHP 7, and half of it goes dark. The culprit is almost always