Question: I have an XML file with an XSLT stylesheet. Internet Explorer opens and renders the XML file as expected. However, File | Print or File | Print Preview does not show any content. What am I missing?

Thanks.

Answer: 
If you have a simple query like

SELECT \* FROM bookings WHERE user\_id = ORDER BY user\_id ASC;

if you don't check user id, it can close your query, then start a new (harmful one) and discard the rest. To achieve this, generally, you would enter something like

1; DELETE FROM bookings; --

initial ; closes the good query, the bad query comes next, then it is closed with ; and -- makes sure that anything that would come next in the good query is commented out. You then end up with

SELECT \* FROM bookings WHERE user\_id = 1; DELETE FROM bookings; -- ORDER BY user\_id ASC;
If your data in properly cleaned and sanatized, a user can try to get their own SQL code to run on the server. for example, let's say you have a query like this:

```
 "SELECT * FROM products WHERE product_type = $type"

```

where type is unchanged user input from a text field. now, if I were to search for this type:

(DELETE FROM products)

You are gonna be in a world of hurt. This is why it's important to make sure all user input in sanatized before running it in the DB.