title: SQL injection attack in LIKE clause
body: <p>I have a file that runs a SQL query:</p>
  
  <p><code>SELECT * FROM items WHERE name LIKE "%&lt;String Passed to It&gt;%"</code></p>
  
  <p>I am trying to test for basic web security here. How can I break this query to drop the <code>items</code> table, without using <code>spaces</code> or <code>semi-colons</code></p>