How can SQL injections be prevented in a PHP login script with remember function?

SQL injections can be prevented in a PHP login script with a remember function by using prepared statements with parameterized queries. This helps to sanitize user input and prevents malicious SQL code from being executed. 

// Using prepared statements to prevent SQL injections
$stmt = $pdo->prepare("SELECT * FROM users WHERE username = :username AND password = :password");
$stmt->bindParam(':username', $username);
$stmt->bindParam(':password', $password);
$stmt->execute();

Keywords

SQL injection PHP login script security prepared statements

Related Questions