The above Groovy script specifies an explicit call to SQL*Plus with the ‘hr’ username and associated ‘hr’ password. It then runs the script showed above by prefacing its name with the ...

The resulting SQL query would look something like: SELECT id FROM users WHERE username=’username’ AND password=’password’ OR 0=0 The statement “0=0” that was added is always true.