php_lib PHP Library need pdo_mysql module use prepared statement for protection from SQL injection $rows = query_rows("SELECT * FROM employee");