source: https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html#defense-option-1-prepared-statements-with-parameterized-queries Parameterized queries force the developer to define all SQL code first and pass in each parameter to the query later.