The SQL injection statement ____ determines the names of different fields in a database.
A) whatever AND email IS NULL; --
B) whatever; AND email IS NULL; --
C) whatever" AND email IS NULL; --
D) whatever' AND email IS NULL; --

Question

Quizplus · Accepted Answer

The statement "whatever' AND email IS NULL; --" includes the single quote symbol, which is a common delimiter used in SQL syntax. By adding this symbol, it can potentially cause the SQL query to break and allow the attacker to inject their own SQL code. In this case, the additional code "email IS NULL" is used to determine the names of different fields in a database. The other choices are incomplete or do not include the necessary single quote symbol to potentially exploit a SQL injection vulnerability.

The SQL Injection Statement ____ Determines the Names of Different