|
You can test it out by putting in ' or " and direct sql statements to see if it affects your data.
You could just put in a ' in your input fields and if you get an error back like this (then you are vulnerable):
"You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax' at line X"
|