Code has been added to clipboard!

Potential Danger in SQL Injection

Example 
txt_user_id = getRequestString("user_id");
txt_sql = "SELECT *  FROM users WHERE user_id = " + txt_user_id;
Related article