Prevent SQL injection in PHP?

$str = "<script>alert('Hacked')</script>";
echo htmlentities($str);

How can I prevent SQL injection in PHP?

//Connect
$unsafe_variable = $_POST["user-input"];
$safe_variable = mysql_real_escape_string($unsafe_variable);

mysql_query("INSERT INTO table (column) VALUES ('" . $safe_variable . "')");
//Disconnect

Source: stackoverflow.com

Similar codes

0 vote309 views1 answer
Return only one column data from table in codeigniter
PHP
0 vote308 views1 answer
Php conditionally remove element from array
PHP
10 votes349 views2 answers
Format date in laravel using carbon
PHP Laravel
0 vote266 views1 answer
Laravel eloquent mass assignments
PHP Laravel
0 vote317 views1 answer
Remove line breaks pjp
PHP
0 vote370 views4 answers
Join table laravel count
PHP Laravel
0 vote421 views1 answer
Laravel array cast
PHP Laravel
12 votes322 views3 answers
Get index of element in array php
PHP
0 vote298 views1 answer
Woocommerce change place order button text
PHP
1 vote313 views1 answer
Laravel apache2
PHP