Comment by salviati

You can write your code so SQL injections are not possible.

You can't do the same with prompt injections.