Portswigger
SQL Injection in WHERE Clause: How to Retrieve Hidden Data (PortSwigger Lab Walkthrough)
A beginner-friendly, step-by-step PortSwigger lab walkthrough: exploiting a SQL injection flaw in a product category filter to retrieve hidden, unreleased products.