I checked the first page of google results for "php sql login" in german and all examples are talking about escaping or prepared statements.