Prevent SQL injection by using prepared statements for database queries.
Source Code
$stmt = $pdo->prepare("SELECT * FROM users WHERE email = ?");
$stmt->execute([$_GET['email']]);
$user = $stmt->fetch();
Subscribe
0 Comments