The article states this as the second bullet point "Use prepared statements with bound variables."

Reading the page I actually think this is pretty good for being language documentation.