quality:corruption
Getting direct output or action

While most SQL server implementations allow multiple statements to be executed with one call in this way, some SQL APIs such as PHP 's mysql_query() function do not allow this for security reasons. This prevents attackers from injecting entirely separate queries, but doesn't stop them from modifying queries.