You receive the following Apache web server log entry: GET /login.php?id=1' OR '1'='1 What...
Nopal Securities technical mcq question, verified with a worked answer. Free to practise - no sign-up.
You receive the following Apache web server log entry:GET /login.php?id=1' OR '1'='1
What type of attack does this log entry represent?
Show answer & explanation
Answer: B. SQL Injection
The payload ' OR '1'='1 injects a tautology into the SQL query logic to bypass authentication.
Step-by-step Derivation:
Step 1: The input breaks out of the intended SQL string literal using a single quote and appends a tautology (OR '1'='1').
Step 2: This is a textbook SQL Injection pattern.