cat > vulnerable-test.php <<'PHP'
<?php

$id = $_GET['id'];

$db = new PDO('sqlite:test.db');

$query = "SELECT * FROM users WHERE id = " . $id;
$result = $db->query($query);

echo $_GET['message'];
PHP