G
G
Georgy Pugachev2020-04-30 10:27:08
SQL
Georgy Pugachev, 2020-04-30 10:27:08

Is SQL injection 4 characters long or less possible?

Is SQL injection 4 characters long or less possible?
If yes, can you write an example?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
A
ayazer, 2020-04-30
@gvpugachev

sql injection is the very fact that you can influence queries to the database. and it is deeply indifferent how many characters there are, this will not stop being a problem.
but for example

select count(id)>1 from auth.users where login='admin';--' and hash=123;

S
Sergey Pankov, 2020-04-30
@trapwalker

%'--
For a stupidly templated request like this:

"SELECT * FROM projects WHERE title LIKE '"+ variable_from_client + "' AND owner_id=13"

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question