If an attacker uses the command SELECT*FROM user WHERE name = x' AND userid IS NULL; --; which type of SQL injection attack is the attacker performing?

The correct answer is A. End of Line Comment. Comments in a line of code are often denoted by (-), are ignored by the query. The database will execute the code until it reaches the commented portion, after which it will ignore the rest of the

SQL Injection

Question

If an attacker uses the command SELECT*FROM user WHERE name = x' AND userid IS NULL; --; which type of SQL injection attack is the attacker performing?

Options

AEnd of Line Comment
BUNION SQL Injection
CIllegal/Logically Incorrect Query
DTautology

How the community answered

(40 responses)

A
70% (28)
B
3% (1)
C
8% (3)
D
20% (8)

Explanation

Comments in a line of code are often denoted by (-), are ignored by the query. The database will execute the code until it reaches the commented portion, after which it will ignore the rest of the

Topics

#SQL injection#end-of-line comment#web application security#database exploitation

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice