The DBManager - http://support.sugarcrm.com/Documentation/Sugar_Developer/Sugar_Developer_Guide_7.7/Data_Framework/Database/DBManagerFac… - is indispensable for querying the database. My favorite way of preventing SQL injection is binding variables, so…