In Magento's admin panel, I can see that a visitor of my magento website entered the following search query in the webshop's search bar:
productName" and (4=4 xor 6=9)-- a
where productName was originally the name of a product we sell.
I know what and and xor are for (though usually (in frontend usage) it only works when entered fully capitalized, I believe), but otherwise I don't understand what the visitor was trying to do here.
I am wondering if this is a hacking attempt. Is this a possibility? If yes, what was this person trying to achieve, and how can I prevent such attempts in the future?