使用 addcslashes 防止 SQL 注入？PHP 开发中这样写更安全

<span><span><span class="hljs-meta"><?php</span></span><span>
</span><span><span class="hljs-comment">// 这部分与文章内容无关，可以放置一些初始化代码或注释</span></span><span>
</span><span><span class="hljs-title function_ invoke__">error_reporting</span></span><span>(E_ALL);
</span><span><span class="hljs-title function_ invoke__">ini_set</span></span><span>(</span><span><span class="hljs-string">'display_errors'</span></span><span>, </span><span><span class="hljs-number">1</span></span><span>);
</span><span><span class="hljs-meta">?></span></span><span>

<hr>

</span><span><span class="hljs-meta"><?php</span></span><span>
<span class="hljs-comment">/*
文章标题: 使用 addcslashes 防止 SQL 注入？PHP 开发中这样写更安全
*/</span>

</span><span><span class="hljs-comment">// 正文开始</span></span><span>

</span><span><span class="hljs-keyword">echo</span></span><span> </span><span><span class="hljs-string">"<h1>使用 addcslashes 防止 SQL 注入？PHP 开发中这样写更安全</h1>"</span></span><span>;

</span><span><span class="hljs-keyword">echo</span></span><span> </span><span><span class="hljs-string">"<p>在 PHP 开发中，很多初学者在处理用户输入时，看到 <code>addcslashes()

\$mysqli = new mysqli('localhost', 'username', 'password', 'testdb');
\$stmt = \$mysqli->prepare('SELECT * FROM users WHERE username = ?');
\$stmt->bind_param('s', \$input_username);
\$stmt->execute();
\$result = \$stmt->get_result();