Câu 99: GCIH: GIAC Certified Incident Handler

An attacker is launching an attack against an input field in a form that is used to retrieve restricted information that is filtered dependent upon the privileges of the logged in user. This attacker inserts "' or 1=1;--" into this field. What is most likely the attacker's desired result from this insertion?

1. A. This forces a bypass on the back-end authentication mechanism, allowing total access to the entire database
2. B. This forces a TRUE condition and may cause the SQL server to return all of the information in the selected field(s)
3. C. This forces a UNION condition and may cause the SQL server to return a list of all columns in the database
4. D. This forces an INSERT condition and will dump all rows in the table to the users screen — đáp án hiện tại