Before injecting SQL you must be able to write it. This lesson covers only the SQL an attacker actually uses: string context, comments, UNION SELECT, and boolean and timing oracles.

SQL in one page

Relational databases answer questions written in SQL. The query you will abuse most is SELECT:

SELECT id, email FROM users WHERE id = 42;