sqli

This fragment is a clearly abuse-oriented SQL injection PoC skeleton. It demonstrates direct, unparameterized interpolation of untrusted input into SQL execution sinks (`ORDER BY ${sort}` and raw ORM `WHERE name = '${userInput}'`), along with exploitation techniques (UNION/boolean/time) and destructive payload examples. No stealthy malware behaviors are evident, but the security impact of the shown patterns is very high due to potential unauthorized data access and database damage.