SQL injection

Question

Hi,
I want to prevent SQL injection in my PHP code. I can detect if the given string contains " symbol, but is there something else I should do? Is it enough?

Answer 1

Build a small penetration lab with kali linux and use sqlmap with the highest security option, or vega, or maltego