title: PHP Filter vs PHP htmlspecialchars vs sqli prepare
body: <p>I've been curious about the advantages/disadvantages of the mentioned methods of sql injection prevention.</p>
  
  <p>The PHP filter just checks to see whether the input is of the correct format and returns true or false, which you can choose to send to the server or not.</p>
  
  <p>PHP htmlspecialchars() function converts special charactors into string equivalents.</p>
  
  <p>I'm not entirely sure on how sqli prepare works as I have limited knowledge of sql as of now, but am I correct in assuming it isn't necessary if you use either PHP filter functions and/or htmlspecialchars?</p>
  
  <p>Just a note: If I have it all wrong, please keep the flaming constructive, I'm still learning PHP and SQL.</p>