Listing 2. A Malicious Form Used to Perform the SQL Injection Attack

<form action="example.com/form.php" method="POST">
<input type="text" name="NUM"
        value="5; DELETE FROM `records`">
<input type="submit">
</form>