SQL injection? CHAR(45,120,49,45,81,45)

This is just a test for injection. If an attacker can see xQs in the output then they’ll know injection is possible.

There is no “risk” from this particular query.

A developer should pay no attention to whatever injection mechanisms, formats or meanings – these are none of his business.

There is only one cause for for all the infinite number of injections – an improperly formatted query. As long as your queries are properly formatted then SQL injections are not possible. Focus on your queries rather than methods of SQL injection.

Leave a Comment

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)