For training purposes, I want to make a demo website vulnerable to SQL injection. I went to the .htaccess file in the server and added these 2 lines:
php_flag magic_quotes_gpc Off
php_flag register_globals on
SQL injection that performed by manipulating the input fields worked well. However, there is a type of SQL injection attack in which the attacker tries to play with the variables sent in the URL to infer information about the data base. The latter is not working with me.
If there is anything else that I must do to enable the SQL injection in my website, please, help me.