dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix some minor grammatical issues.

Browse Source
This commit is contained in:
TimDG 2018-05-08 11:27:13 +02:00 committed by Nanne Baars
parent 6a5ca43e7e
commit 0b9a027c19
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_content6c.adoc
View File

@ -9,7 +9,7 @@ injection.
Let's first start with the difference between a normal SQL injection and a blind SQL injection. In a normal Let's first start with the difference between a normal SQL injection and a blind SQL injection. In a normal
SQL injection the error messages from the database are displayed and gives enough information to find out how SQL injection the error messages from the database are displayed and gives enough information to find out how
the query is working. Or in the case of an union based SQL injection the application does not reflect the information the query is working. Or in the case of a union based SQL injection the application does not reflect the information
directly on the webpage. So in the case where nothing is displayed you will need to start asking the database questions directly on the webpage. So in the case where nothing is displayed you will need to start asking the database questions
based on a true or false statement. That's why a blind SQL injection is much more difficult to exploit. based on a true or false statement. That's why a blind SQL injection is much more difficult to exploit.

2
webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_content7.adoc
View File

@ -1,6 +1,6 @@
== Immutable Queries == Immutable Queries
These are the best defense against SQL Injection. They either do not have data that could get interpreted or the treat the data as a single entity that is bound to a column without interpretation. These are the best defense against SQL Injection. They either do not have data that could get interpreted or they treat the data as a single entity that is bound to a column without interpretation.
=== Static Queries === Static Queries
------------------------------------------------------- -------------------------------------------------------