diff --git a/src/main/resources/lessons/sqlinjection/documentation/SqlInjection_content13.adoc b/src/main/resources/lessons/sqlinjection/documentation/SqlInjection_content13.adoc index 749459d10..a43a5b484 100644 --- a/src/main/resources/lessons/sqlinjection/documentation/SqlInjection_content13.adoc +++ b/src/main/resources/lessons/sqlinjection/documentation/SqlInjection_content13.adoc @@ -34,7 +34,7 @@ This means an `orderExpression` can be a `selectExpression` which can be a funct a `case` statement we might be able to ask the database some questions, like: ---- -SELECT * FROM users ORDER BY (CASE WHEN (TRUE) THEN lastname ELSE firstname) +SELECT * FROM users ORDER BY (CASE WHEN (TRUE) THEN lastname ELSE firstname END) ---- So we can substitute any kind of boolean operation in the `when(....)` part. The statement will just work because