Today my friend asking help to test and prevent his website from sql injection..
After i tried basic sql injection like
1 OR 1=1,
' OR 1--',
' '1'='1 There is no mysql error displayed..
But After i tried
chr(0xbf) . chr(0x27) . ' OR username = username #' on its username and password login form it showing error:
Warning: mysqli_fetch_array() expects parameter 1 to be mysqli_result, boolean given
Is it can be vuln to inject with SQL Injection method?
Cause after i try with SQLMap it say does not seem to be injectable.