> For the complete documentation index, see [llms.txt](https://jorgectf.gitbook.io/awae-oswe-preparation-resources/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://jorgectf.gitbook.io/awae-oswe-preparation-resources/by-vulnerability/sql-injection/regex.md).

# Regex

```
= *[\.\+]*.*['"][%s]*.*(SELECT|UPDATE|INSERT|DELETE|WHERE|ORDER).*[%s]*['"] *[\.\+]
```

![https://regex101.com/](/files/-MC2gLs8BqqhNdAgt8GD)

```
= *[\.\+]*.*['"][%s]*.*(SELECT|UPDATE|INSERT|DELETE|WHERE|ORDER).*[%s]*['"] *[\.\+]

= matches the character = literally (case sensitive)
 * matches the character (space) literally (case sensitive)
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
Match a single character present in the list [\.\+]*
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
\. matches the character . literally (case sensitive)
\+ matches the character + literally (case sensitive)
.* matches any character (except for line terminators)
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
Match a single character present in the list ['"]
'" matches a single character in the list '" (case sensitive)
Match a single character present in the list [%s]*
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
%s matches a single character in the list %s (case sensitive)
.* matches any character (except for line terminators)
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
1st Capturing Group (SELECT|UPDATE|INSERT|DELETE|WHERE|ORDER)
.* matches any character (except for line terminators)
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
Match a single character present in the list [%s]*
Match a single character present in the list ['"]
 * matches the character (space) literally (case sensitive)
Match a single character present in the list [\.\+]
```