{keyword}' And (select Chr(100)||chr(85)||chr(102)||chr(83) From Sysibm.sysdummy1)=chr(100)||chr(85)||chr(102)||chr(83) And 'ikjv'='ikjv Instant

If it works, the attacker will replace the "True" statement with a query that asks for sensitive data, such as: "Is the first letter of the admin password 'A'?"

The attacker is attempting to "trick" the database into running a command that was never intended by the website's developers. If it works, the attacker will replace the

CHR(100)||CHR(85)||CHR(102)||CHR(83) translates to the string "dUfS" .The code asks the database: "Does dUfS equal dUfS?" Since this is always true, the database will process the request without an error. If it works