Michael Kuan says to Happy Web Developer
db不對外 帳號限制權限 sql injection該bind的bind