Free Learning: Fixed the issue of Non-Parameterised Input

[ali-ichk]

Fixed the issue of Non-Parameterised Input
#58

[rossdotparker]

Thanks @ali-ichk!

@SKuipers are you able to confirm for me that this is a safe way for the student ID list to be handled? Thanks!

[SKuipers]

@rossdotparker Thanks for checking to confirm.

@ali-ichk While the variables have been sanitized, they have not necessarily been added as parameters. For best practice, they need to be added to the data array, and then used as a parameter in the SQL eg IN (:studentIDList)

[ali-ichk]

@SKuipers thanks for the comments. I have made some changes based on your comments. Thanks. Happy Reviewing!!