Takes advantage of an unsecure login system and inject SQL.

<?php
$mysqli = new mysqli("example.com", "user", "password", "database");
$sql = "SELECT * FROM users WHERE id = '" . $_POST['id'] . "'";
$result = $mysqli->query($sql);
?>