If the page loads normally, the attacker knows the database is expecting 6 columns.
This is a SQL operator used to combine the result sets of two or more SELECT statements into a single result set. If the page loads normally, the attacker knows
This is the "probe" part of the injection. The attacker is trying to determine the number of columns being returned by the original database query. If the page loads normally
: For a UNION to work, the second query must have the exact same number of columns as the first query. 3. SELECT NULL,NULL,NULL,NULL,NULL,NULL If the page loads normally, the attacker knows