SQL injection fundamentals

I have this question

What is the department number for the ‘Development’ department?

So I type show databases;

Got the following
Screen Shot 2022-08-24 at 16.11.43

Then I think the department table is here

Screen Shot 2022-08-24 at 16.13.27

But nothing related to and none of the databases have something like department, any hint? thank you

What is the last name of the employee whose first name starts with “Bar” AND who was hired on 1990-01-01?

I don’t understand why do I get empty set with this query

Select* from employees where first_name like “Bar%” and hire_date = 1990-01-01. Do I typing something wrong?

Regarding your first question: There are several tables in the database employees. Try to look there for information about departments. What you show in your pictures seems to be the table employees.employees.

For your second problem:
I’d suggest that you check if your second parameter value is passed in the right way. Try to find the type of the field you try to search and how the data has to be passed.

1st question - check the tables that employees DB has. Check the values of the table in question.

2nd question - don’t forget to use quotes.

SELECT last_name FROM employees WHERE first_name LIKE ‘Bar%’ AND hire_date=‘1990-01-01’;

since we are searching for the last name we select lastname not all!