https://www.php-resource.de/en/php-manual/function.mysqli-escape-string.html