title: how to SQL inject this?
body: <pre><code>mysql_select_db($database_db, $db);
  query_user = "SELECT * FROM customers WHERE email = '$login'";
  user = mysql_query($query_user, $db) or die(mysql_error());
  row_user = mysql_fetch_assoc($user);
  totalRows_user = mysql_num_rows($user);
  </code></pre>
  
  <p>i need some help i know this might be injectable i need to bring up all the customer details within    the database. please help. </p>