Listing 1. Building an SQL Query in PHP Based on POST Variables

<?php
$query = "SELECT id, name FROM `records` LIMIT "
         . $_POST['NUM'];
$result = $db->select($query);
?>