• Use a parametrized query.