SQL Injection


https://some.com?user=4

select name from users where id=4

https://some.com?user='4 or 1=1'

select name from users where id=4 or 1=1

demo

CSRF

demo

hijacking attack

demo

 

SQL Injection

By Vladimir

SQL Injection

  • 139