Prepared statements: http://stackoverflow.com/questions/6...jection-in-php