Troy Hunt: Everything you wanted to know about SQL injection ...

30 Jul 2013 ... This is the essence of SQL injection – manipulating query execution with ..... information by virtue of the HTML response being different based on a true versus a false equivalency test.

www.troyhunt.com