SQL Injection Method

Question

The Injection Procedures are :

SELECT UserId, Name, Password FROM Users WHERE UserId = 105 or 1=1;

But, My Question Is how the injection query

Answer 1

its when you have your query as string in your code, something like this

Query = "SELECT UserId, Name, Password FROM Users WHERE UserId = '" + sUserID + "'"

So you pass sUserID = "ABC' OR 1=1;"

this will be translated like

SELECT UserId, Name, Password FROM Users WHERE UserId = 'ABC' OR 1=1