Sql injection doubt

Here you can find some insights;