To protect against SQL injection, it is recommended to and validate user input.