A visual explanation of MySQL Injection attacks

By Jason E Rush

Changes in the form are updated in real time (javascript) to give a visual representation of how an SQL query might look.

Login Form Example

Examples

Examples modify current page using Javascript.
    User Pass

    MySQL Query

    SELECT * FROM users WHERE user='' AND pass='';
     

    URL Example

    The following examples are based on this tutorial from Hackers lounge

    http://www.hack3r.com/news.php?id=

    MySQL Query

    SELECT * FROM articles WHERE id=;

    Examples

    Examples modify current page using Javascript.