Question

How to prevent sql injection?

Answer 1

To protect a web site from SQL injection, you can use SQL parameters.

SQL parameters are values that are added to an SQL query at execution time, in a controlled manner.
$<MARQUEE BGCOLOR="aqua">hope it helps</MARQUEE>........$