$name = $_GET['name'] Select * from table where name = '{$name}' Is there any way to exploit this kind of code, considering that it is part...
Separate names with a comma.