SQL Injection api

1. "/addresses/<address_id>"

query: /address/'or''='