Securing PHP Applications: Stopping SQL Injection with Prepared Statements
One line of careless PHP is all it takes. A login form that drops a username straight into a query string,
prepared statements
How to Secure Your PHP Application by Using Prepared Statements
Here’s a bug that has burned more developers than almost any other: you drop a variable straight into a SQL string,