sql injection step by step :::::: step 1 : use single quote ( ‘ ) on url to confirm vulnerability. step 2 : finding number of column: www.site.com/….php?id… Original source