Question: A website contains the following code which sends a message, user name and password to a server: 1 c form action = message . php

A website contains the following code which sends a message, user name and password to a server: 1c form action=message.php method=get2c pMessage: input type=text name=message//p3c pUsername: input type=text name=user//p4c pPassword: input type=text name=pass//p5c pinput type=submit//p and on the server the message.php page processes this data: 1s ?php 2s $user = $REQUEST[user]; 3s $pass = $REQUEST[pass]; 4s $message = $REQUEST[message]; 5s $result = mysqlimultiquery($con,UPDATE messages SET 6s message=.$message. WHERE user=.$user.); 7s $row = mysqlifetcharray($result); 8s if (!empty($row))9s echo Your message: .$message. has been added; 10s 11s ? Describe four security weaknesses in this website, how they might be exploited and rank them in order of severity. [8 marks]

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!