### MYSQL注入 ``` $id = "1' or 1 #"; $sql = "DELETE FROM tab_user WHERE id = '{$id}'"; ```