https://www.togidev.com/how-to-prevent-sql-injection-attacks-in-php/