I think that the following query is preventing against SQL injection, but what other measures do I need to take to ensure my queries are 100% safe from any malicious attacks?$statement = $db->prepare(    INSERT INTO blogs (blogtitle, blogdesc, coverimage, userID, frontpage, tags)     VALUES (:buildtitle, :builddesc, :buildcover, :userid, :frontpage, :addtags));if ($statement->execute(array(    ':buildtitle' => $_POST['addbuildtitle'],    ':builddesc' => $_POST['addbuilddesc'],    ':buildcover' => $imagepath,    ':userid' => $_POST['adduserid'],    ':frontpage' => $frontpage,    ':addtags' => $_POST['addtags'])));
Remove vulnerabilities from query on public website
php;sql;security;pdo