Please use prepared statements to eliminate the possibility of SQL injection attacks.