SELECT user,passwd FROM members

WHERE user = ‘?’;INSERT INTO members(‘user’,’passwd’) VALUES

(‘bob@example.com’,‘secret’);--‘;

SELECT id, name FROM user WHERE user.id=(SELECT members.id FROM members);

SELECT id, name FROM user WHERE id=23 OR id=32 OR 1=1;

SELECT id, name FROM user WHERE id=23 OR id=32 AND 1=1;

SELECT email,passwd FROM members

WHERE email = ‘INSERT INTO members(‘email’,’passwd’) VALUES (‘bob@example.com’,

‘secret’);--‘;

SELECT user, phone FROM customers WHERE name = ‘\; DROP TABLE users; --‘;