{keyword}';waitfor Delay '0:0:5'-- -

: This character acts as a statement terminator, allowing a second, malicious command to be executed immediately after.

: If the website takes exactly 5 seconds longer to load than usual after this input, the attacker knows the application is vulnerable to SQL injection. {KEYWORD}';WAITFOR DELAY '0:0:5'--

: Use prepared statements so the database treats input as data, never as executable code. : This character acts as a statement terminator,