{keyword}' Union All Select Null-- Xiuj Apr 2026

Combines the results of the original, intended query with the results of a new, malicious query.

Closes the original input string, allowing the attacker to break out of the intended query structure. {KEYWORD}' UNION ALL SELECT NULL-- xIuj

Comments out the rest of the original SQL query, preventing syntax errors caused by the remaining code. Purpose and Techniques SQL injection UNION attacks | Web Security Academy Combines the results of the original, intended query