[Security] SQL Injection Hacking #2 - Order By

Using the ORDER BY clause in SQL to find the number of columns being returned from a SELECT query. This method uses an intelligent brute-force method of trial and error to eventually trigger an error. Based on when this error happens, we can infer how many columns were returned. Thanks for watching! :D