Yes, I manually added the single quotes for example user=1' so it gave me 500 error, then i tried adding '-- or 1=1-- then it gave me another response. so in that way i try to check sqli