To help you started with this task, we explain how authentication is implemented in our web application.

The PHP code unsafe$\_$credential. php$,$ located in the $/$var$/$www$/$seedlabsqlinjection$.$com$/$public$\_$html directory, is used to conduct user authentication. The following code snippet shows how users are authenticated.

$conn $=$ getDB$()$;

$$sq1=$ SELECTid,name,eid,salary,birth,$ssn,$phone

$u$ mber,address

email,nickname,Password

FROMcredential

WHEREeid$=\text{'}$$$inpu{t}_e$id'andpassword$=\text{'}$$$inpu{t}_{p}wd\text{'}$;

$result $=$ $conn$$query$($$$sql)$

SEED Labs$/$adapted by Walter