What kind of SQL injections do you know?

Question

I'll provide a simple one here:

$query = "select id from accounts where email='$_POST[email]' and psw='$_POST[password]'";
$result = mysql_query($query,$con);
if($row = mysql_fetch_assoc($result))
    return true;
else
    return false;

If the password is 1' or '1'='1,then will do the trick!

What other tips have you known?

Answer 1

SQL Injection - Forms of Vulnerability

Answer 2

Open Web Application Security Project (OWASP) - SQL Injection Examples

Answer 3

These are other popular forms of SQL Injection Detection and Testing:

• Union Query SQL Injection Testing
• Blind SQL Injection Testing
• Stored Procedure Injection

Testing For SQL Injection

Answer 4

Probably the most popuplar example of SQL injection ( from XKCD):