Fun with SQLi

Items Table

ID	Name
1	Thing 1
2	Thing 2
3	Red fish
4	Blue fish

Example Attack Strings

SQL Injection:

Select: 1 OR 1=1

XSS Attacks:

<script>alert(1)</script>
<img src="x" onerror="alert(1)">