how i get vulnerability of app and website ! in which i focus more for search vulnerability

Answer 1

first of all you should protect website from sql injection, because it's common and simple.
you can filter user input and be sure it has not special character using in sql.