https://www.webcodegeeks.com/php/php-sql-injection-tutorial-protect/