title: Null character in Sql Injection
body: <p>Going through sql injection on hakipedia, i understand that the injections are assumed to go along a parameter (which becomes a part of the sql query at the server end).</p>
  
  <p>e.g.</p>
  
  <pre><code>select news from news_table where id=1
  </code></pre>
  
  <p>is attacked as</p>
  
  <pre><code>select news from news_table where id=NULL UNION ALL select * from users
  </code></pre>
  
  <p>However, in information schema (<a href="http://hakipedia.com/index.php/SQL_Injection#INFORMATION_SCHEMA" rel="nofollow">http://hakipedia.com/index.php/SQL_Injection#INFORMATION_SCHEMA</a>) and Mysql Benchmark (<a href="http://hakipedia.com/index.php/SQL_Injection#MySQL_BENCHMARK" rel="nofollow">http://hakipedia.com/index.php/SQL_Injection#MySQL_BENCHMARK</a>) injection vector the NULL before UNION ALL is not explicitly stated. Is this correct or am i missing something?</p>