How can I prevent SQL injection in PHP

87
//Connect
$unsafe_variable = $_POST["user-input"];
$safe_variable = mysql_real_escape_string($unsafe_variable);

mysql_query("INSERT INTO table (column) VALUES ('" . $safe_variable . "')");
//Disconnect

Comments

Submit
0 Comments

More Questions

php array has valuephp string to int php string replace
php string contains substringphp append to array laravel run seed
php parse jsonphp check if string contains word php split string
php artisan make migrationcomposer ignore requirements in_array in php
Your requirements could not be resolved to an installable set of packages.magento 2 composer install laravel-ui v3.0.0 requires php ^7.3 - your php version (8.0.2) does not satisfy that requirement.
schema defaultstringlength(191)laravel form validation laravel table in model
use wordpress functions in external php filecomposer ignore platform reqs phpmailer send attachment
item count in cart quantitiy woocommerceLaravel seed timestamps columns php convert degrees to radians
php numbers from 1 to 100 arrayphp file read php use variable as object key
php in array keylaravel controller code for editing a column in a table htaccess post max size
laravel timestamps on pivot tablephp array join convert string to array laravel
wordpress get post by idcomposer cache clean laravel new project command
jetstream seed user with teamphpunit stop on failure get record of last 24 hours in laravel
wordpress get fiture imageadmin bar hide wordpress laravel when
how to create shortcodelaravel decrement check if all values in array are equal php
redirect previous pagehow to allow cors through header in php events.js:174 error discord.js
C
CSS
Objective-C
PHP
Java
C++
Javascript
Html
Python
SQL
Swift
Ruby
Go
R
TypeScript
Kotlin
Assembly
VBA
Scala
Rust
Elixir
Dart
Haskell
Perl
Fortran
Matlab
Scheme
Julia
Lua
Delphi
Pascal
Solidity
BASIC
ActionScript
Csharp