This is an old revision of the document!

Hacking - SQL Injection - MySQL - String Operations

String related operations can be quite useful to build up injections which are not using any quotes, bypass any other black listing or determine back end database.

String Concatenation

||
 
SELECT login || '-' || password FROM members