alessandrogario
SELECT x FROM table WHERE something IN ( SELECT y FROM possibly_untrusted_input_from_table );