CODE EXAMPLE FOR PHP

real escape string mysqli

$firstname = mysqli_real_escape_string($con, $_POST['firstname']);