Question: The following line of code have the SQL injection vulnerability, where id is an input. String query = select name from students where id =
The following line of code have the SQL injection vulnerability, where id is an input.
String query = "select name from students where id = " + id + ";";
(a) Show an exploitation that always makes a true condition of the query.
(b) If id is of type integer, discuss two security methods to prevent the injection.
(c) If id is of type char, the query string will be the following. Show an exploitation that always makes a true condition of the query.
String query = "select name from students where id = '" + id + "';";
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
