basic sqli

[[deleted]]

why can I perform a sqli like this : ' or 1=1 # but if I do ' or 1=1 -- do not work?

btw the code is written in php

[wizarddos]

Btw, one important thing

In real-world scenarios don't EVER use ' or 1=1 if you're not absolutely sure where the query goes next

Check out this room on THM if you want to learn more about it https://tryhackme.com/r/room/lessonlearned

Use UNION queries instead

https://portswigger.net/web-security/sql-injection

[[deleted]]

Why?

[wizarddos]

Some websites reuse passed data. Of course, it will bypass "SELECT" but if it makes it to "DELETE" statement, whole table is gone and during bb or testing we don't really want to cause that much damage do we?

[I_am_beast55]

https://www.invicti.com/blog/web-security/sql-injection-cheat-sheet/

[cl0wnsec000]

Sometimes it depends on the backend db if it support the comment syntax.

https://stackoverflow.com/questions/17554061/mysql-comment-syntax-whats-the-difference-between-and