title: Is this query vulnerable to sql injection?
body: <pre><code>$myq = sprintf("select user from table where user='%s'", $_POST["user"]);
  </code></pre>
  
  <p>I would like to know if the above query can be exploited using SQL injection. Is there any advanced SQL injection technique that could break <code>sprintf</code> for this particular query?</p>