See SQL injection - Wikipedia, the free encyclopedia

As a simple example, imagine the following scenario with your database having a table named users...




tableName =...