Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %s with simple quote

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %d with simple quote

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %d

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : interpretation with simple quote

Unsafe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : interpretation

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : concatenation with simple quote

Unsafe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : concatenation

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %u with simple quote

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %u

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %s with simple quote

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %d with simple quote

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %d

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : interpretation with simple quote

Unsafe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : interpretation

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : concatenation with simple quote

Unsafe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : concatenation

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %u with simple quote

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %u

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %s with simple quote

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %d with simple quote

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : use of sprintf via a %d

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : interpretation with simple quote

Unsafe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : interpretation

Safe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : concatenation with simple quote

Unsafe sample input : get the field userData from the variable $_GET via an object, which store it in a array SANITIZE : use of mysql_real_escape string construction : concatenation