Use prepared statements.

Original writeup (https://www.nevivur.net/writeups/2019/02/tamuctf-19/#sql).