PrepAway - Latest Free Exam Questions & Answers

What will it return?

Look at the following SQL query.
SELECT * FROM product WHERE PCategory=’computers’ or 1=1–‘
What will it return? Select the best answer.

PrepAway - Latest Free Exam Questions & Answers

A.
All computers and all 1’s

B.
All computers

C.
All computers and everything else

D.
Everything except computers

Explanation:
The 1=1 tells the SQL database to return everything,a simplified statement would be SELECT *
FROM product WHERE 1=1 (which will always be true for all columns). Thus,this query will return
all computers and everything else. The or 1=1 is a common test to see if a web application is
vulnerable to a SQL attack.


Leave a Reply