> How can we avoid this security risk using PHP & postgreSQL?. Be sure to verify all input from the untrusted source is valid, and after you do that, be sure to escape it using pg_escape_string() or pg_escape_bytea().
pgsql-php by date:
Соглашаюсь с условиями обработки персональных данных