SQL Injection Advanced Syntax





» Normal SQL Injection:


1 OR 1=1

Database support: [mySQL]



» Normal SQL Injection using encapsulated data:

1' OR '1'='1
Database support: [mySQL]


» Blind SQL Injection to throw an error to validate that
encapsulation isn’t working. The goal here is to throw an error to cause
the application to show us that it is not encapsulating quotes
correctly:

1'1
Database support: [mySQL]