> For the complete documentation index, see [llms.txt](https://jorgectf.gitbook.io/awae-oswe-preparation-resources/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://jorgectf.gitbook.io/awae-oswe-preparation-resources/by-vulnerability/sql-injection/regex.md).

# Regex

```
= *[\.\+]*.*['"][%s]*.*(SELECT|UPDATE|INSERT|DELETE|WHERE|ORDER).*[%s]*['"] *[\.\+]
```

![https://regex101.com/](https://582400710-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MB9XRWYAylRXqXobXnP%2F-MC2fKTN_2WA_KTNNaJj%2F-MC2gLs8BqqhNdAgt8GD%2FCaptura.PNG?alt=media\&token=96df3d54-d72e-48da-8894-c8a07b20afd6)

```
= *[\.\+]*.*['"][%s]*.*(SELECT|UPDATE|INSERT|DELETE|WHERE|ORDER).*[%s]*['"] *[\.\+]

= matches the character = literally (case sensitive)
 * matches the character (space) literally (case sensitive)
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
Match a single character present in the list [\.\+]*
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
\. matches the character . literally (case sensitive)
\+ matches the character + literally (case sensitive)
.* matches any character (except for line terminators)
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
Match a single character present in the list ['"]
'" matches a single character in the list '" (case sensitive)
Match a single character present in the list [%s]*
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
%s matches a single character in the list %s (case sensitive)
.* matches any character (except for line terminators)
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
1st Capturing Group (SELECT|UPDATE|INSERT|DELETE|WHERE|ORDER)
.* matches any character (except for line terminators)
* Quantifier — Matches between zero and unlimited times, as many times as possible, giving back as needed (greedy)
Match a single character present in the list [%s]*
Match a single character present in the list ['"]
 * matches the character (space) literally (case sensitive)
Match a single character present in the list [\.\+]
```