How can I prevent SQL injection in PHP?

Angular 6. Upload string as a file

I create xml string in my angular application. For example

const xml = "<?xml version="1.0"?><root></root>";

And I want to upload this string to the server as a file using FormData