We should use prefix with extract in php to make it secure enough.

extract($_POST, EXTR_PREFIX_ALL,'unique_prefix');
Advertisements