use ts info legally

what is SQL injection

SQL injection or (SQLI) happens when a hacker or hackers type some SQL payload in a log in page which interfere with the db queries and bypassing authentication which is only one part of SQLI most people know other payloads harvest the whole db etc
common paylodes are the [OR payload]

OR

how people do it payload ' OR 1=1 --

This is to show you to type the user name and use the payload on user after typing user name ' OR '1'='1

what happen the db will check if the password is corroct or 1=1 1 will be 1

how to find if web site can be hacked lick ts add an extra ' in user name if say syntax error sqli can work

to save you'r website by filter the db

1: do not using raw in put as executable
2: to find out if a website is sqli hackbele hide error mesage say some thing like wrong password or username