So I found this section of a webpage, which is a basic "feedback box". It had all the characteristics of an SQL injectable element. Scanned it with OWASP, it was true. Tried SQLmap, it gave me connection errors since it was protected.
Since it's an element with no output, only a "thank you" message. How can I test it?
Here's the error message I get when I don't comment out the rest:
La consulta falló: select * from encuestas_new_t where id = '1' and 1=0' and 1=0=1 -- '
When I comment out the rest of the query with
-- - it works as if it was the normal default link. What steps would you recommend me to take? Thank you