Lead
-
Posts
3 -
Joined
-
Last visited
Lead's Achievements
-
Welcome to SecHub. This is a forum where you can learn about everything.
-
The SQL query would become: SELECT * FROM users WHERE username = 'john' AND password = '' OR '1'='1'; Because '1'='1' is always true, the query effectively bypasses the password check, allowing the attacker to log in as any user!