Boolean Island !

Hello guys today i’ll discuss about SQL Injection.This is a technique by with any hacker can destroy your database.
Example : Suppose our page is
include ‘connect.php’;
$pass=$_POST['pass'];
$user=$_POST['user'];
$sql=”select * from $table where pass=’$pass’ and name=’$user’;”;
$re=mysql_query($sql);
if(mysql_num_rows($re)==1)
{
$_SESSION['db_is_loggged_in']=true;
header(‘location:admin.php’);
exit();
}
else echo “Wrond pass or user name”;
if any user input is like “‘OR 1″ then somthing will happen unexpected.Hackers can do something like [...]