API Testing · Middle · Question 24 of 75
Which test input checks for SQL injection in a search parameter?
- 1
' OR 1=1 --and checking results and errors - 2A very long but valid search word
- 3A search word written in capital letters
Show the answer
Correct answer: ' OR 1=1 -- and checking results and errors
Explanation
If the response changes oddly or shows a database error, input may reach SQL unescaped. Parameterized queries prevent it.