Question: 1. You have found a SQL injection vulnerability in a login function, and you try to use the input or 1=1-- to bypass the login.
1. You have found a SQL injection vulnerability in a login function, and you try to use the input or 1=1-- to bypass the login. Your attack fails and the resulting error message indicates that the -- characters are being stripped by the applications input filters. How could you circumvent this problem?
please help me to solve this in correct.
this answer was wrong that published which was (Well there is another possibility of using OR 1=1 after the query instead of using -- at the last since it has been filtered out by the application's input filters. Otherwise we can also use 1 =' 1. Thanks.) i ask my teacherso so I want correct answer for this Q so I want a clear answer with details and thanks a lot.
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
