thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Blind SQL Injection

SQL injection where the application does not return query results or errors, so impact is inferred from behavior or timing.

Definition

Boolean-based blind injection observes differences in responses to true/false conditions; time-based blind injection observes delays. Lack of error output does not mean an application is safe. The same defenses apply: parameterized queries and least privilege.

Example

A login page returns the same page for every input but responds slower when a time-delay condition is injected.

Exam tip

Suppressing errors does not fix SQL injection; it just makes it blind.

Related terms