Question

How does the LIMIT clause in SQL queries lead to injection attacks

Answer 1

The LIMIT clause restricts the number of rows returned by a query. However, if user input isn't sanitized and is directly passed into the SQL query, it could lead to SQL injection.

For instance:

If $user_input is not properly handled, an attacker could inject something like:

This would delete your users table. Always use parameterized queries to avoid this kind of attack.