{keyword}' Union All — Select Null,null,null,null,null,null,null,null From Msysaccessobjects-- Udhz

Only allow the types of characters you expect (e.g., numbers for an ID field).

Comments out the rest of the original query so it doesn't cause a syntax error [1, 5]. How to Prevent It: Only allow the types of characters you expect (e

Appends a new set of results to the original query [2, 5]. not executable code [6].

This is the gold standard. It treats user input as literal text, not executable code [6]. Only allow the types of characters you expect (e