Most likely, the modified statement returns every entry in the users table and causes the server to send an email to a random person.
users