How does the left data appear in the ip field in the nginx log?

Question

Nginx

there is sql injection log
123.132.123.123 - - [19/Sep/2019:04:08:47 +0200] "GET /admin/gsettings.php HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" "';UPDATE users SET tam=1 WHERE username=\x22NameUs\x22;--,111.11.11.11
" Ip what is in front of it? Before 11/11/11/11?
in other words, how is such a get request formed? Headings added?

Answer 1

It is simply formed, for example, not in the browser at all. Accordingly, you can set any headers, make any request, send any data.
Actually, therefore, you can never just trust the data that came from the user. None, no field in the form, no http header. Everything needs to be filtered.