my $sql = "SELECT * FROM users WHERE id = '$user'";

##</code><code>##

my $sql = "SELECT * FROM users WHERE id = '" . $user . "'";