One SQL injection prevention method that can be implemented in the input validation step is by escaping all characters that have some special purpose, using the mysqli_real_escape_string function. If the field has some specific format it must follow, you might consider designing stricter validity check. Another way to avoid SQL injections is storing inputs in parameters that cannot hold arbitrary SQL fragments.
spam fails_task lang_mismatch pii not_appropriate hate_speech sexual_content quality toxicity humor helpfulness creativity violence