Aki T

So in my case, if I escape the single quote successfully, it negates the SQL injection possibility by user text input right?

I meant restricting the single quote from the frontend user filter input. Simply we can ensure that the user can't input the single quote in the textbox.