SQL-injection-attack-querying-the-database-type-and-version-on-MySQL-and-Microsoft

(1) To findout existing column: 'ORDER BY 1--. But got internal server error. because in mysql database the comment method is comment# instead of comment--

(2) After giving the query for mysql database: 'ORDER BY 1#. Here, we got the 2 columns are available.

(3) To findout which column are data retrieving: 'UNION SELECT 'Data','Data'#. Both two columns are retrieving data

(4) To know the version of mysql database: 'UNION SELECT @@version, NULL#