test custome bog

1. Preventing SQL Injection (for database updates): Prepared Statements with Parameter Binding: This is the most secure and recommended method. Instead of directly embedding variable values into your SQL query, you use placeholders and then bind the actual values to these placeholders. This ensures that the database driver handles the escaping of special characters, preventing malicious code from being executed.