Like the last example, the page is ripe for SQL injection attacks because the executed SQL is constructed dynamically from a user-entered value.

与上一示例一样，此页也会受到SQLInjection攻击，因为执行的SQL是通过用户输入的值动态构造的。