https://mehdizenhari.com/blog/php-prepared-statements-security