anchor.diff:  ") OR ("41"="41"
   ----
   
  +If the attack vector is in POST (HTTP body), try each of the above with and without URL encoding. For GET (HTTP URL), just use URL encoding.
  +
   == SQLs
   
   The new SQL tests:
   
   [source]
   ----
  -'BREAK\"
  +'BREAK"
   
   ORIG+1-1
   ORIG'+0+'0
  
positive.code: "=
  ----
  
  == SQLu
  
  The old SQL tests:
  
  [source]
  ----
  'BREAK\"
          
  OR 41=41
  ' OR '41'='41
  
negative.code: /**/ORIG
  ----
  
  If the attack vector is in POST (HTTP body), try each of the above with and without URL encoding. For GET (HTTP URL), just use URL encoding.