Prevent SQL injection in several parameters