SQL Injection attacks

use of prajwal.kumar@email.com’—

the ’— if used sets the rest of the line of SQL Query as comment, and might print out all the database results.