How can PHP variables be properly defined to avoid only inserting the first letter of a value into a database?

When defining PHP variables to insert into a database, it is important to ensure that the variables are properly sanitized and escaped to prevent SQL injection. To avoid only inserting the first letter of a value into a database, make sure to use prepared statements with parameterized queries. This will separate the data from the query, allowing the full value of the variable to be inserted correctly into the database.

// Assuming $conn is the database connection object

// Define the variable with the full value
$value = "example value";

// Prepare the SQL statement with a parameterized query
$stmt = $conn->prepare("INSERT INTO table_name (column_name) VALUES (?)");
$stmt->bind_param("s", $value);

// Execute the statement
$stmt->execute();

// Close the statement and connection
$stmt->close();
$conn->close();