cos'è sql injection: https://www.google.it/search?q=sql+i...+sql+injection