Question: The following line of code have the SQL injection vulnerability, where id is an input. String query = select name from students where id =

The following line of code have the SQL injection vulnerability, where id is an input.

String query = "select name from students where id = " + id + ";";

a) Show an exploitation that always makes a true condition of the query.

b) If id is of type integer, discuss two security methods to prevent the injection.

c) If id is of type char, they query string will be the following. Show an exploitaiton that always makes a true condition of the query.

String query = "select name from students where id = '" + id + '";";

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!