What best practices should be followed when populating a dropdown menu in PHP with data from a database query?

When populating a dropdown menu in PHP with data from a database query, it is important to properly sanitize the data to prevent SQL injection attacks. Additionally, you should use a loop to iterate through the query results and generate the options for the dropdown menu dynamically. Finally, make sure to set the selected option based on any existing data or user input.

// Assuming you have already established a database connection

// Perform a query to fetch the data for the dropdown menu
$query = "SELECT id, name FROM options_table";
$result = mysqli_query($connection, $query);

// Generate the dropdown menu options dynamically
echo '<select name="dropdown">';
while ($row = mysqli_fetch_assoc($result)) {
    echo '<option value="' . $row['id'] . '"';
    if ($row['id'] == $selectedOption) {
        echo ' selected';
    }
    echo '>' . $row['name'] . '</option>';
}
echo '</select>';