If an attacker uses the command SELECT*FROM user WHERE name = ‘x’ AND userid IS NULL; –‘; which type of SQL injection attack is the attacker performing?

If an attacker uses the command SELECT*FROM user WHERE name = ‘x’ AND userid IS NULL; –‘; which type of SQL injection attack is the attacker performing?
A . End of Line Comment
B . UNION SQL Injection
C . Illegal/Logically Incorrect Query
D . Tautology

Answer: D

Subscribe
Notify of
guest
1 Comment
Inline Feedbacks
View all comments
ori
ori
3 years ago

this is lie!

A is correct
check

https://ktflash.gitbooks.io/ceh_v9/content/132_types_of_sql_injection.html

End of Line Comment: After injecting code into a particular field, legitimate code that follows if nullified through usage of end of line comments: SELECT * FROM user WHERE name = ‘x’ AND userid IS NULL; –‘;