Which is the most secure approach for handling dynamic data in SQL queries?
Use addslashes().
Enable magic_quotes_gpc.
Use prepared statements if supported by the database library, data-specific escaping functions otherwise.
Use stored procedures.
Submit