-9108 Union All Select 34,34# Apr 2026

Ever seen a weird string like -9108 UNION ALL SELECT 34,34# in your server logs? It’s not a glitch—it’s a probe.

Here are three post drafts tailored for different audiences. Option 1: Educational (Cybersecurity 101) -9108 UNION ALL SELECT 34,34#

Stop concatenating strings and start using Prepared Statements . #CyberSecurity #WebDev #InfoSec #SQLInjection Option 2: The "Dev-to-Dev" Quick Tip Stop trusting user input! 🛡️ Ever seen a weird string like -9108 UNION

I can refine the technical details or add more platform-specific hashtags if you'd like! UNION ALL - IBM UNION ALL - IBM Attackers use the operator

Attackers use the operator to append their own data to your query results. By using a non-existent ID like -9108 , they ensure the original data is hidden, leaving only their injected values (the 34,34 ) visible. The # at the end simply comments out the rest of your original code to prevent syntax errors.

If your app can be tricked by a string like -9108 UNION ALL SELECT 34,34# , your database is wide open. This snippet tests if a query's column count matches the injection (in this case, 2 columns). -9108: Invalidates the primary query. UNION ALL: Merges a second result set. SELECT 34,34: The "dummy" data being retrieved. #: The comment character that kills the trailing SQL. Check your inputs today at OWASP SQL Injection Guide . #CodingTips #Backend #SQL #DatabaseSecurity Option 3: Short & Punchy (Social Media/X)

Don't let your data be the next leak. Use parameterized queries! 🛡️ #TechNews #Programming #SQLi #WebSecurity

Scroll to Top