title: In which web language can I execute multiple queries with SQL injection?
body: <p>I'm doing a college work about web vulnerabilities, and I need to demonstrate in practice some of those vulnerabilities, especially SQL injection. I developed two applications, one in PHP, and one in JSP, but none of those accepts multiple queries, and I need to execute a <code>DROP TABLE</code> from a SQL injection script.</p>
  
  <p>So I already know that <code>mysql_query()</code> escapes multiple queries, and <code>Statement.execute()</code> too, I haven't tried yet with ASP.NET. But is ASP.NET the only web language that allows that in the simplest query syntax? Like <code>mysql_query()</code> is PHP simplest syntax, and <code>st.execute()</code> is JSP's simplest syntax, that means that a lot of web applications uses this syntax.</p>
  
  <p>JSP</p>
  
  <pre><code>String query = "SELECT * from user; DROP TABLE user;-- ";
  st = con.createStatement();
  st.execute(query);
  </code></pre>
  
  <p>PHP</p>
  
  <pre><code>mysql_query("SELECT * from user; DROP TABLE user;-- ");
  </code></pre>
  
  <p>Edit: I was not very clear, I'm making a vulnerable login application, and I need to <code>DROP</code> a table with a SQL injection, like in a query:</p>
  
  <pre><code>"SELECT * FROM user where user ='".$_POST['user']."' AND pass = md5('".$_POST['pass']."')";
  </code></pre>
  
  <p>I pass in the user field '; DROP TABLE user; -- ', my question is, which web language allows me to do that <strong>without using specific functions like <code>mysqli_multi_query()</code>?</strong></p>