{keyword}' | Union All Select Null,null,null,null,null,null,null,null,null,null-- Ebfu

: Used to match the number of columns in the original table. Attackers add these one by one until the error message disappears.

The database engine never interprets the ' UNION... part as a command. : Used to match the number of columns in the original table

: Combines the results of the original query with a new query. : Used to match the number of columns in the original table

: Comments out the rest of the legitimate SQL code so it doesn't execute and cause an error. : Used to match the number of columns in the original table

: Likely a "canary" or unique tag used by automated scanners to identify if the payload was successfully reflected in the page. 🛡️ How to Stop It

Discuss the difference between and Blind SQL injection.

The string you provided is a classic attempt.