Merge pull request #214 from Reelix/patch-1

Added alternate quote variation
This commit is contained in:
Carlos Polop 2021-08-23 21:57:34 +01:00 committed by GitHub
commit 8fb43e1c37
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -201,7 +201,9 @@ $q = '/usuarios/usuario[cuenta="' . $_POST['user'] . '" and passwd="' . $_POST['
```text
' or '1'='1
" or "1"="1
' or ''='
" or ""="
string(//user[name/text()='' or '1'='1' and password/text()='' or '1'='1']/account/text())
Select account