SQL Injection

https://some.com?user=4

select name from users where id=4

https://some.com?user='4 or 1=1'

select name from users where id=4 or 1=1

demo

CSRF

demo

hijacking attack

demo