Added explanations on using `--` in SQL to comment out unwanted trailing characters. Payload should not have a `'` as numbers should not be wrapped by quotes (source: https://www.w3schools.com/sql/sql_where.asp ) The previous payload would have an extra closing quote in the SQL query.