Preventing SQL Injection Attacks taking PHP as an example