3 ms·
as far as i can see it is a little harder to exploit because you can't access the results of the sql injection. but you can change how long it takes for the que
by benmmurphy 14y ago
as far as i can see it is a little harder to exploit because you can't access the results of the sql injection. but you can change how long it takes for the query to execute based on the value in a column so you can extract arbitrary values from the database using this technique.