Which evidence-based approach does Laravel recommend to prevent SQL injection when using raw expressions in the query builder?
-
A
Escape strings with htmlspecialchars()
-
B
Use PDO::quote() on all inputs
-
C
Use parameter bindings with ? or named placeholders
-
D
Wrap values in DB::raw() calls