mysql limit报错注入

-- 不安全的动态LIMIT查询
SELECT * FROM users WHERE role = 'admin' LIMIT $_GET['limit'];

// PHP示例代码
$limit = isset($_GET['limit']) ? intval($_GET['limit']) : 10;
if ($limit < 1 || $limit > 100) {
    $limit = 10; // 设置默认值或抛出错误
}
$sql = "SELECT * FROM users WHERE role = 'admin' LIMIT $limit";

// PHP示例代码
$stmt = $pdo->prepare("SELECT * FROM users WHERE role = 'admin' LIMIT :limit");
$limit = isset($_GET['limit']) ? intval($_GET['limit']) : 10;
if ($limit < 1 || $limit > 100) {
    $limit = 10; // 设置默认值或抛出错误
}
$stmt->bindParam(':limit', $limit, PDO::PARAM_INT);
$stmt->execute();
$result = $stmt->fetchAll();