Administrators Thanked: 265 раз
It is NOT an SQL injection, it is an SQL error, because ID is empty in that query.