SQL Injection using Emulated Prepared Statements (the default) in PHP PDO_MYSQL in GBK - View it on GitHub