Pergunta de entrevista da empresa RedBeryl

How to hide API keys from end user?? How to avoid SQL Injuction ??