6 votes
Accepted

Why does this SQL injection have an equals symbol?

In SQL operator "AND" has higher precedence than "OR". Let add parentheses, to make the logic more clear: SELECT * FROM Users WHERE (Name ="") or (""="&...
user avatar
  • 7,916

Only top scored, non community-wiki answers of a minimum length are eligible