A best practice is to be away of a potential security hole called SQL Injection. Let's explore that and how to prevent it.