The same as earlier. For even a basic level of SQL injection, you ought to know the DB details of the victim. Then you either inject via UI, middle layer, or hacking DB.

Hacking DB is another complex procedure, and we are talking of Pakistan's IPO website. I mean you got to hack their DB servers to get the DB schema and then make an injection attempt. All this hacking to get Twitter accounts of AAP supporters suspended, those which didnt even reach a few thousand, the idea and the conspiracy theory is kiddish.

The other ways are of course via UI, where parsing is mostly done for even basic of websites these days. The same with middle layer. Parsing is a must for basic websites which are dynamic, and we are talking about Pakistan IPO website.

The entire SQL injection story is laughable.

As someone who himself has received a couple of DMCA notices, when you complain to them, they make a lot of research and mostly reject claims if the image is already on internet before the date on website concerned. If they find theft, they "mail" first, and deactivation comes much much later.

Its a pity r/hoopy_frood42 you decided to share the story again in spite of you claiming you understood the theory was flimsy.