tutorial 27
Understanding Parameter Binding and SQL Injection