diff --git a/ webgoat/main/project/WebContent/WEB-INF/webgoat_oracle.sql b/ webgoat/main/project/WebContent/WEB-INF/webgoat_oracle.sql index e5ac117e6..8e4d82e67 100755 --- a/ webgoat/main/project/WebContent/WEB-INF/webgoat_oracle.sql +++ b/ webgoat/main/project/WebContent/WEB-INF/webgoat_oracle.sql @@ -3,4 +3,18 @@ CREATE USER webgoat IDENTIFIED BY webgoat DEFAULT TABLESPACE users; GRANT CONNECT, RESOURCE TO webgoat; GRANT CREATE PROCEDURE TO webgoat; +CREATE OR REPLACE PROCEDURE EMPLOYEE_LOGIN(v_id NUMBER, v_password VARCHAR) AS + stmt VARCHAR(32767);v_userid NUMBER; +BEGIN + stmt := 'SELECT USERID FROM EMPLOYEE WHERE USERID = ' || v_id || ' AND PASSWORD = ''' || v_password || ''''; + EXECUTE IMMEDIATE stmt INTO v_userid; +END; + +CREATE OR REPLACE PROCEDURE EMPLOYEE_LOGIN_BACKUP(v_id NUMBER, v_password VARCHAR) AS + stmt VARCHAR(32767);v_userid NUMBER; +BEGIN + stmt := 'SELECT USERID FROM EMPLOYEE WHERE USERID = ' || v_id || ' AND PASSWORD = ''' || v_password || ''''; + EXECUTE IMMEDIATE stmt INTO v_userid; +END; + exit;