I am practicing SQL injection with DVWA, but for some reason the server keeps giving me an error even when I comment out extra '
.
For example, here is what I inputed in my website:
http://localhost/DVWA/vulnerabilities/sqli/?id=' OR SLEEP(5) AND 'a'='a' /*
But for some reason it still gives me an error even when I comment out all of the extra characters as shown in the URL when I used the /*
. It keeps giving me the following error:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near
'aaa'='aaa' /* ''
at line 1.