Does the string php id 1 within a http GET request mean there is necesseraly an sql request to a back-end database

Question

You can use Google dorks like "inurl:.php?id=" to locate websites that might have sql injection vulnerabilities.

Do all of the websites featured in the Google search results use SQL databases (MySQL, Oracle, or any other)?

Answer 1

We can't technically claim that it relates to a database because it was a backend request. The problem is that while the value was collected using $_GET['id'], only the backend, using PHP, could determine the value that was returned. Therefore, a SQL connection is not really required for that purpose.

I hope this helps you.