As the results from the second query is not returned, we have to use blind SQLi methods to confirm that. MySQL SUBSTRING('main_string', START_POSITION, SUB_STRING_LENGTH) SUBSTRING('main_string' FROM ...

According to the SQLite documentation documentation, substr() should be able to act on blobs, in which case its index arguments act on bytes.