Question: 2. The following line of java code have the SQL injection vulnerability, where id is an input. String query = select name from students where
2. The following line of java code have the SQL injection vulnerability, where id is an input.
String query = "select name from students where id = " + id + ";";
(a) Show an exploitation that always makes a true condition of the query.
(b) If id is of type integer, discuss two security methods to prevent the injection.
(c) If id is of type char, the query string will be the following. Show an exploitation that always makes a true condition of the query.
String query = "select name from students where id = '" + id + "';";
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
