I have the following MySQL query:

mysql -u ${username} -p${password} --host=${host} --port=${port} --ssl-ca=${cert} --database=${db} -se "SELECT destination FROM table WHERE source='${name}'"

I just got a feedback that the query falls under sql-injection.
How can I modify that query to fix that?