ways to prevent SQL injection in PHP

the most comprehensive approach to preventing SQL injection PHP prevents SQL injection from being detailed and protected Preventing SQL Injection implementation code in PHP

SQL injection is one of the most common vulnerabilities in PHP applications. In fact, it's amazing that developers have to make two errors at the same time to trigger a SQL injection vulnerability: One is not filtering the input data (filtering the input), and one is not escaping the data sent to the database (escaped output). These two important steps are indispensable and require special attention at the same time to reduce procedural errors.

The mysql_real_escape_string () function escapes special characters in strings used in SQL statements.

ways to prevent SQL injection in PHP