Union All Select Null,null,null-- Djgp | {keyword}

: They use "NULL" to figure out exactly how many columns your database table has without triggering a data-type error.

Instead of building strings, use prepared statements. This treats input as "data" rather than "executable code." {KEYWORD} UNION ALL SELECT NULL,NULL,NULL-- DJGP

It looks like you've provided a common SQL injection payload ( UNION ALL SELECT NULL... ) followed by the initials "DJGP." : They use "NULL" to figure out exactly

Tools like Sequelize, Eloquent, or Entity Framework handle much of this protection for you by default. The Bottom Line NULL-- is a classic attack pattern.

The snippet {KEYWORD} UNION ALL SELECT NULL,NULL,NULL-- is a classic attack pattern.