Which SQL statement represents a SQL injection attempt to determine the names of different fields in a database?
A)whatever AND email IS NULL;--
B)whatever;AND email IS NULL;--
C)whatever" AND email IS NULL;--
D)whatever' AND email IS NULL;--

Question

Quizplus · Accepted Answer

The correct choice, D, represents a SQL injection attempt because it uses a single quote to terminate a string input prematurely and then attempts to add additional SQL logic. This pattern is a common technique in SQL injection attacks to manipulate the query and potentially reveal information about the database structure, such as field names.

Which SQL Statement Represents a SQL Injection Attempt to Determine