Even if it is a 'cookie' problem then it means that user sourced data is not going through an appropriate sanitisation before inclusion in a sql query. This is how sql injection attacks happen. From ...

Statement level is the lowest level of granularity to fail or succeed upon. If you have in your example 100 records in table A to update based upon some logic (e.g. from another table, from a custom ...