You can read the task, take hints and check your answer — but nothing is saved. No XP, no skill points, and this task will not be marked complete.
Rewrite this so user input can never be parsed as SQL:
```
query = "SELECT * FROM users WHERE email = '" + email + "'"
```
Use a placeholder and pass the value separately.
What this proves: Separate code from data using parameterised queries.
Need assistance? You can reveal sequential hints. Each hint applies a minor penalty to your score.
If you are completely stuck, you can unlock the full step-by-step walkthrough.