diff --git a/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java b/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java index b1f4a21a0..0774de7bd 100644 --- a/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java +++ b/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java @@ -70,6 +70,7 @@ public class SqlInjectionLesson3 extends AssignmentEndpoint { ResultSet _results = check_statement.executeQuery("SELECT * FROM employees WHERE last_name='Barnett';"); StringBuffer output = new StringBuffer(); // user completes lesson if the department of Tobi Barnett now is 'Sales' + _results.first(); if (_results.getString("department").equals("Sales")) { output.append(SqlInjectionLesson8.generateTable(_results)); return trackProgress(success().feedbackArgs(output.toString()).build()); diff --git a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content1.adoc b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content1.adoc index ed1ef042a..7d66ead4e 100644 --- a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content1.adoc +++ b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content1.adoc @@ -4,7 +4,7 @@ SQL is a standardized (ANSI in 1986, ISO in 1987) programming language which is A database is a collection of data. Data is organized into rows, columns and tables, and it is indexed to make it easier to find relevant information. -Example SQL table with employees: +Example SQL table with employees, the name of the table is 'employees': Employees Table |===