diff --git a/vulnerable-test.php b/vulnerable-test.php
new file mode 100644
index 0000000..10cc091
--- /dev/null
+++ b/vulnerable-test.php
@@ -0,0 +1,12 @@
+cat > vulnerable-test.php <<'PHP'
+<?php
+
+$id = $_GET['id'];
+
+$db = new PDO('sqlite:test.db');
+
+$query = "SELECT * FROM users WHERE id = " . $id;
+$result = $db->query($query);
+
+echo $_GET['message'];
+PHP