Skip to content

Commit

Permalink
SQL Injection lesson 6 minor mistakes in examples WebGoat#663
Browse files Browse the repository at this point in the history
  • Loading branch information
nbaars committed Oct 30, 2019
1 parent a0933d8 commit 96d1169
Showing 1 changed file with 3 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@

==== Here are some examples of what a hacker could supply to the input field to perform actions on the database that go further than just reading the data of a single user:

* `+Smith’ OR ‘1’ = 1+` +
results in `+"SELECT * FROM USERS WHERE NAME = 'Smith' OR TRUE;+` and that way will return all entries from the users table
* `+Smith’ OR '1' = '1+` +
results in `+SELECT * FROM USERS WHERE NAME = 'Smith' OR TRUE;+` and that way will return all entries from the users table
* `+Smith’ OR 1 = 1; --+` +
results in `+"SELECT * FROM USERS WHERE NAME = 'Smith' OR TRUE;--';+` and that way will return all entries from the users table
results in `+SELECT * FROM USERS WHERE NAME = 'Smith' OR TRUE;--';+` and that way will return all entries from the users table
* `+Smith’; DROP TABLE USERS; TRUNCATE AUDIT_LOG; --+` +
chains multiple SQL-Commands and deletes the USERS table as well as entries from the audit_log

0 comments on commit 96d1169

Please sign in to comment.