Secure against SQL Injection - PDO, mysqli [duplicate]

Answer 1

I've been using PDO.

An example for that in your case:

prepare("insert into user (user) values (?)");
   $stmt->bindParam(1, $name);
   $name = 'ValueHere';
   $stmt->execute();
?>