转义sql插入字符串的最佳方法是什么？

// PDO
$pdo = new PDO("mysql:host=localhost;dbname=test", "username", "password");
$stmt = $pdo->prepare("INSERT INTO users (username, password) VALUES (:username, :password)");
$stmt->bindParam(":username", $username);
$stmt->bindParam(":password", $password);
$stmt->execute();

// MySQLi
$mysqli = new mysqli("localhost", "username", "password", "test");
$stmt = $mysqli->prepare("INSERT INTO users (username, password) VALUES (?, ?)");
$stmt->bind_param("ss", $username, $password);
$stmt->execute();

import mysql.connector

cnx = mysql.connector.connect(user='username', password='password', host='localhost', database='test')
cursor = cnx.cursor()
query = "INSERT INTO users (username, password) VALUES (%s, %s)"
data = ("example_user", "example_password")
cursor.execute(query, data)
cnx.commit()

import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;

public class Main {
    public static void main(String[] args) {
        try {
            Class.forName("com.mysql.jdbc.Driver");
            Connection conn = DriverManager.getConnection("jdbc:mysql://localhost/test", "username", "password");
            PreparedStatement stmt = conn.prepareStatement("INSERT INTO users (username, password) VALUES (?, ?)");
            stmt.setString(1, "example_user");
            stmt.setString(2, "example_password");
            stmt.executeUpdate();
            conn.close();
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}