SQL injection

Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data

Problem:

In this lab, when the user selects a category, the application carries out an SQL query like the following: SELECT * FROM products WHERE category = ‘Gifts’ AND released = 1

I use