I'm practicing SQL injection on DVWA (non-blind) with the lowest security settings. I want to list the tables in the current database. To do that, I attempt to enter 0'; show tables;-- in the User ID field like this
I expect that would issue the following statement to MySQL
SELECT * FROM users WHERE user_id = '0'; show tables;--'
However, when I hit submit I get this error
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'show tables;--'' at line 1
I suspect its something simple I'm missing and would appreciate any help in learning the correct way to do this. Thanks!