Question: SELECT * FROM user _ data WHERE login _ count = + Login _ Count + AND userid = + User _

"SELECT * FROM user_data WHERE login_count ="+ Login_Count +" AND userid ="+ User_ID;
Using the two Input Fields below, try to retrieve all the data from the users table.
Warning: Only one of these fields is susceptible to SQL Injection. You need to find out which, to successfully retrieve all the data.
Login_Count:
User_Id:
Get Account Info
Sorry the solution is not correct, please try again.
org.owasp.webgoat.lessons.sqlinjection.introduction.SqllnjectionLesson5b : unexpected token: in statement [SELECT * From user_data WHERE Login_Count =? and userid=1=1]
Your query was: SELECT * From user_data WHERE Login_Count =1 and userid =1=1
I've tried everything I think, I don't know what the hell I'm doing anymore.
"SELECT * FROM user _ data WHERE login _ count =

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Accounting Questions!