Protect your database against SQL injection using MySQLi