RE: HOW TO SECURE YOUR DATABASE USING PHP,MYSQL
It's better to use binding https://secure.php.net/manual/en/pdostatement.bindparam.php.
RE: HOW TO SECURE YOUR DATABASE USING PHP,MYSQL