6
votes
Accepted
Why does this SQL injection have an equals symbol?
In SQL operator "AND" has higher precedence than "OR". Let add parentheses, to make the logic more clear:
SELECT * FROM Users WHERE (Name ="") or (""="&...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
sql-injection × 888mysql × 213
php × 152
web-application × 126
sqlmap × 113
databases × 73
penetration-test × 53
sql-server × 46
xss × 42
injection × 41
appsec × 31
attacks × 24
exploit × 21
vulnerability × 21
authentication × 17
postgresql × 17
asp.net × 15
vulnerability-scanners × 14
waf × 14
java × 13
javascript × 12
attack-prevention × 12
passwords × 11
burp-suite × 11
mariadb × 11