PHP Security Help

If I were you, I would use PDO. You can read more about it here http://php.net/manual/en/ref.pdo-mysql.php. This article will help you with understanding why this helps prevent injection https://websitebeaver.com/php-pdo-prepar...-injection.