title: SQL injection result
body: <p>Why does this query return the row with id 116:</p>
  
  <pre><code>SELECT * 
  FROM blahTable
  WHERE id =  '116\' OR \'1\'=\'1'
  </code></pre>
  
  <p>The id in the table is 116 but surely it should return 0 rows after that injection code has been added?</p>