psalm/docs/running_psalm/issues/TaintedSql.md

TaintedSql

Emitted when user-controlled input can be passed into a SQL command.

<?php

class A {
    public function deleteUser(PDO $pdo) : void {
        $userId = self::getUserId();
        $pdo->exec("delete from users where user_id = " . $userId);
    }

    public static function getUserId() : string {
        return (string) $_GET["user_id"];
    }
}