If we are to use equivalent partitioning technique, which one of the following answers is the most efficient to test against SQL injection?
- %, ', @, abn123
- ', ab123
Software Quality Assurance & Testing Stack Exchange is a question and answer site for software quality control experts, automation engineers, and software testers. It only takes a minute to sign up.Sign up to join this community
The answer is 3.
This answer is correct, but from equivalent partitioning point of view, it offers two valid inputs, bbbbb and 12345, from valid input partitioning.
%, ', @, abn123
This answer has three valid inputs from valid input partitioning.
This answer has one valid input and one escape character.
This answer has only got one escape character, no valid input at all.
Please bear in mind, ISTQB exam does not cover everything, letting alone SQL injection techniques. I suggest you spend some time studying SQL injection, there is a good link here. SQL Injection OWASP