https://programmingfields.com/what-is-sql-injection-and-how-to-prevent-it-in-php/