6
votes
Accepted
Why does this SQL injection have an equals symbol?
In SQL operator "AND" has higher precedence than "OR". Let add parentheses, to make the logic more clear:
SELECT * FROM Users WHERE (Name ="") or (""="&...
- 7,916
Only top scored, non community-wiki answers of a minimum length are eligible