encoding, and validation automatically, instead of relying on the developer to provide
this capability at every point where output is generated.
Process SQL queries using prepared statements, parameterized queries, or stored
procedures. These features should accept parameters or variables and support strong