CODE EXAMPLE FOR SQL

is sql injection still possible

Yes, SQL injections are still a thing