Difference between revisions of "SQL injection"

From Notes_Wiki
(Created page with "=SQL injection= For websites that use ASP and Oracle combination, "<tt>' or 1=1 --</tt>" (without double quotes) can be used as username or password for SQL injection.")
(No difference)

Revision as of 23:36, 23 November 2012

SQL injection

For websites that use ASP and Oracle combination, "' or 1=1 --" (without double quotes) can be used as username or password for SQL injection.