OWASP Vulnerabilities · interview question
What does the 'OR 1=1;--' SQL Injection payload typically achieve?
Multiple choiceMediumchapter-17-curatedpremiumowasp-vulnerabilitiessql-injection
Answer and explanation
Correct answer
B. It bypasses authentication checks
Why
The 'OR 1=1;--' payload alters the logic of SQL queries to always evaluate to true, often used to bypass authentication checks and gain unauthorized access by continuing execution despite conditions.
Test yourself on OWASP Vulnerabilities
A free test with instant, explained results. No account needed.
More OWASP Vulnerabilities questions
- How would you explain a potential consequence of not using prepared statements in SQL queries in an interview?
- In the context of JWTs, what is the risk of not validating the 'alg' field in the header?
- Why is it important to validate the 'exp' claim in a JWT?
- How does the Spring Security filter chain protect against SQL Injection?
- How would you explain a potential risk of not using CSRF tokens in web applications in an interview?
- What does 'stateless' imply in the context of JWT?