PHP Prepared Statements

Prepared statements protect your database from SQL injection attacks.

secure.php



<?php


$stmt=$conn->prepare(

"SELECT * FROM users WHERE email=?"

);


$stmt->bind_param(

"s",

$email

);


$stmt->execute();


?>

Security Rule

Always use prepared statements for user input.