Question: 2. The following line of java code have the SQL injection vulnerability, where id is an input. String query = select name from students where

2. The following line of java code have the SQL injection vulnerability, where id is an input.

String query = "select name from students where id = " + id + ";";

(a) Show an exploitation that always makes a true condition of the query.

(b) If id is of type integer, discuss two security methods to prevent the injection.

(c) If id is of type char, the query string will be the following. Show an exploitation that always makes a true condition of the query.

String query = "select name from students where id = '" + id + "';";

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!