What type of queries are considered as SQL injection?
1
vote
1
answer
192
views
I was testing efficacy of a paid **Database security solution** which has the ability to detect and block **SQLi attack**. For the testing purpose I have tried the following query against a **PostgreSQL** database through this tool which act as a proxy.
select * from test where id=1 or 1=1;
For this query the tool were able to detect and block. But then I tried another one
select * from test where id=1 or true;
But this time the query got infiltrated and got the full table data as result.
Isn't it a classical example of SQLi? What type of queries are actually considered as SQLi which I can test against the tool?
Asked by goodfella
(595 rep)
Dec 1, 2023, 07:16 AM
Last activity: Jun 27, 2025, 06:06 AM
Last activity: Jun 27, 2025, 06:06 AM