my ($id) = $dbh->selectrow_array("SELECT id FROM users WHERE NAME='$name' AND PASSWORD='$password'"); #### $name = "admin\'\0"; #### $name = "admin';";