Real SQL injection payloads throughout codebase: - "'; DROP TABLE users;--" - "' UNION SELECT username,password,email,NULL FROM users WHERE id=1--" Should be sanitized or moved to secure test data.