simple strings to test for this vulnerability to test the canonical representations for code injection?

Need to list the specific set of strings that can be tested in our PHP application

Deliverables
List of sample strings for the canonical representation. Also understand what they are preventing in code injection