https://blog.csdn.net/u013802.

$stmt = $mysqli->prepare("INSERT INTO table_name (name) VALUES (?)");
$stmt->bind_param("s", $postedName);

I use this way to inject data into
. It seems to be possible to wait for Filter. I see that "follow" is displayed in the data table. Is this normal?
but suppose that when I fished for information, there was a string containing "something like", such as
Hello, "I"m fine

he will become Hello
and the one behind it will be broken, won"t it show?
I am writing web pages in mysqli now, so I want to find a temporary solution. .
it"s just that I can"t find a suitable method on the Internet
Please come and save me