Sample Header Ad - 728x90

What type of queries are considered as SQL injection?

1 vote
1 answer
192 views
I was testing efficacy of a paid **Database security solution** which has the ability to detect and block **SQLi attack**. For the testing purpose I have tried the following query against a **PostgreSQL** database through this tool which act as a proxy. select * from test where id=1 or 1=1; For this query the tool were able to detect and block. But then I tried another one select * from test where id=1 or true; But this time the query got infiltrated and got the full table data as result. Isn't it a classical example of SQLi? What type of queries are actually considered as SQLi which I can test against the tool?
Asked by goodfella (595 rep)
Dec 1, 2023, 07:16 AM
Last activity: Jun 27, 2025, 06:06 AM