-1' OR 3*2>999 --

It looks like you’re showing a SQL injection payload: -1' OR 3*2>999 --.

Key points you might be tested on:

• 3*2>999 evaluates to false (6 > 999 is false).
• The -1' fragment is typically meant to close a string literal in a query, and the -- at the end starts a SQL comment, effectively ignoring the rest of the query.
• As a standalone expression, this is not a valid boolean expression. Its effect depends entirely on the surrounding SQL context (e.g., the exact query it’s injected into).

How it behaves in a query (illustrative, not instruction):

• A vulnerable query might look like: ... WHERE name = '$input';
• If $input is -1' OR 3*2>999 --, the query becomes: ... WHERE name = '-1' OR 6>999 --;
• Since 6>999 is false, the condition reduces to name = '-1' (i.e., the injection doesn’t grant access by itself in this form).
• The important part is the presence of --, which comments out the rest of the query.

Defensive notes (exam-friendly):

• This is a classic example to illustrate why parameterized queries are essential.
• Always use prepared statements and bound parameters so user input cannot alter the query structure.
• Validate and constrain inputs, apply least-privilege database accounts, and use input sanitization only as an additional safeguard.

If you’d like, I can turn this into a quick exam-style practice task (e.g., evaluate given injections, explain why they fail or succeed, and propose secure coding fixes).