https://php-include.com/php-api-security-protecting-against-sql-injection/