Fun with SQLi

Items Table

ID	Name
1	Thing 1
2	Thing 2
3	Red fish
4	Blue fish
5	Zero
6	<script>alert(1)</script>
7	<img src="x" onerror="alert(1)">
8	<img src="x" onerror="alert(1)">
9	Boo!
10	ConFoo!!!
11	hellooo

Example Attack Strings

SQL Injection:

Select: 1 OR 1=1

XSS Attacks:

<script>alert(1)</script>
<img src="x" onerror="alert(1)">