SELECT * FROM `Member` WHERE username = '@username'
SELECT * FROM `Member` WHERE username = '1' OR 1=1 -- Comment'