Mega'/**/and(select'1'from/**/pg_sleep(0))::text>'0 Apr 2026

pg_sleep(X) is a Postgres function that pauses the query execution for X seconds.

Similar to the PortSwigger Blind SQL Injection lab examples, this structure is used to ask the database boolean questions (e.g., "Does the database name start with 'a'?"). If the page delays, the answer is yes; if it loads immediately, the answer is no. Detection and Mitigation MEGA'/**/and(select'1'from/**/pg_sleep(0))::text>'0

Here is an analysis of this query, often categorized as a "proper" or standard testing article in ethical hacking: Payload Breakdown pg_sleep(X) is a Postgres function that pauses the

: A dummy value or string to close a previous single-quote, attempting to break out of the original SQL query context. the answer is yes

Go to Top