Question

Why might an attacker include '--' at the end of a SQL injection string?

Skip