Take the following SQL query as an example:
UPDATE `sqlinjection2` SET `$vote`=`$vote`+1
Our goal is to increment the vote count by more than one, in one request.
We cannot access the code itself.
If we can send a value to $vote, we could send:
So that the query looks like that:
SET `vote`=1, `vote`=X+`vote`=`vote`=1, `vote`=X+`vote`+1;
Clarification: X is a number.
My question is, how does this part work?
I understand that it sets the column vote to be NULL, but why is that?