Prevent SQL injection in PHP?

$str = "<script>alert('Hacked')</script>";
echo htmlentities($str);

How can I prevent SQL injection in PHP?

//Connect
$unsafe_variable = $_POST["user-input"];
$safe_variable = mysql_real_escape_string($unsafe_variable);

mysql_query("INSERT INTO table (column) VALUES ('" . $safe_variable . "')");
//Disconnect

Source: stackoverflow.com

Similar codes

0 vote133 views2 answers
Php artisan app:name in laravel 6
PHP
1 vote171 views3 answers
Check image exist or not in laravel
PHP Laravel
1 vote123 views1 answer
Close mysql connection in php
PHP
0 vote121 views1 answer
Php phalcon
PHP
8 votes127 views6 answers
Laravel session
PHP Laravel
0 vote132 views1 answer
Php money_format currency symbol
PHP
0 vote138 views1 answer
How to index column in laravel
PHP Laravel
8 votes142 views4 answers
If user logged in wordpress
PHP Wordpress
1 vote116 views1 answer
2 different forms in one page php
PHP
1 vote119 views1 answer
If else if php code reflect
PHP