You have the following two tables in a MySQL database called it230.

You also have the following track.php page that allows a user to enter an order number and then connects to the database to return the status of that order.

-1 union select concat(user_name,'-',password) as status from users;

Suppose that a user types the following into the order number field in the page:

What will happen?

What do we call this type of attack?

Re-write track.php so, it prevents this attack.

order statuses PK order number int(11) status varchar(30) order statuses PK order number int(11) status varchar(30)