How can I prevent SQL injection in PHP?
stackoverflow.com