Search

Your query is echoed unencoded and dropped straight into a LIKE SQL string (try %' UNION SELECT id,username,password FROM users-- -). The sort reads the last of a repeated sort param (?sort=name&sort=price).