Prevent SQL injection in PHP?

$str = "<script>alert('Hacked')</script>";
echo htmlentities($str);

How can I prevent SQL injection in PHP?

//Connect
$unsafe_variable = $_POST["user-input"];
$safe_variable = mysql_real_escape_string($unsafe_variable);

mysql_query("INSERT INTO table (column) VALUES ('" . $safe_variable . "')");
//Disconnect

Source: stackoverflow.com

Similar codes

0 vote147 views1 answer
Laravel collection times
PHP Laravel
3 votes212 views3 answers
Wordpress notice
PHP
121 votes333 views6 answers
Check if a String Contains a Substring in PHP
PHP
0 vote139 views1 answer
Laravel get current action name
PHP Laravel
2 votes146 views1 answer
Migrations required field laravel
PHP Laravel
1 vote134 views1 answer
Read pdf text php
PHP
-1 vote160 views2 answers
Laravel model save get id
PHP Laravel
-1 vote143 views2 answers
Map array php
PHP
1 vote124 views1 answer
Php convert date and time to iso 8601
PHP
1 vote118 views1 answer
Symfony call another controller
PHP