200-201 Question 107

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 2

  The provided SQL query is an example of a **SQL injection** attack. In SQL injection attacks, malicious SQL code is injected into input fields or parameters used in SQL queries to manipulate the database query's logic. In this case, the input `" OR '1'='1';` is designed to manipulate the query to always return results because `'1'='1'` is a true statement in SQL. This could potentially allow an attacker to bypass authentication or retrieve sensitive data from the database. So, the correct answer is ** SQL injection**.

• Chose C1

  SQL injection