Select Code to Download

SELECT email, passwd, login_id, full_name FROM members WHERE email = '
+$email'; 
x'; UPDATE members SET email = 'steve@unixwiz.net' WHERE email = 'bob@
+example.com
SELECT email, passwd, login_id, full_name FROM members WHERE email = '
+x'; UPDATE members SET email = 'steve@unixwiz.net' WHERE email = 'bob
+@example.com';

my $sth = $dbh->do ("select * from users; drop database screwme;" );

my $sth = $dbh->prepare ("select * from users; drop database screwme;"
+ );
$sth->execute();

DBD::mysql::db do failed: You have an error in your SQL syntax. Check 
+the manual that corresponds to your MySQL server version for the righ
+t syntax to use near '; drop database screwme' at line 1...

# ...load the DBI and connect to your database first
...
   
while ( my @row = $sth->fetchrow_array() ) { print join("-",@row) , "<
+br>"; } # instead of the form, weīre lazy, arenīt we? Thatīs good!

5' or 1='1

select username, password from users where sid='   5' or 1='1  ';

5' or 1=1 LIMIT 1,'1

5' or 1=1 HAVING username<'c

my $sth = $dbh->prepare ("select username, password from users where s
+id='$input';" );

sid= ' $input '

my $sth = $dbh->prepare ("select username, password from users where s
+id='?';" );
                            
my $affected = $sth->execute ( $input );

$input =~ /'/\\'/g;