From 6cf3740c04ab09a4e1de616e1737d6c31fab4cde Mon Sep 17 00:00:00 2001 From: Max Geldner Date: Sun, 25 Nov 2018 16:51:07 +0100 Subject: [PATCH] Fixes bug in introduction assignment 3 and adjusted wording in assignment 1 --- .../owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java | 1 + .../lessonPlans/en/SqlInjection_introduction_content1.adoc | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java b/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java index b1f4a21a0..0774de7bd 100644 --- a/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java +++ b/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java @@ -70,6 +70,7 @@ public class SqlInjectionLesson3 extends AssignmentEndpoint { ResultSet _results = check_statement.executeQuery("SELECT * FROM employees WHERE last_name='Barnett';"); StringBuffer output = new StringBuffer(); // user completes lesson if the department of Tobi Barnett now is 'Sales' + _results.first(); if (_results.getString("department").equals("Sales")) { output.append(SqlInjectionLesson8.generateTable(_results)); return trackProgress(success().feedbackArgs(output.toString()).build()); diff --git a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content1.adoc b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content1.adoc index ed1ef042a..7d66ead4e 100644 --- a/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content1.adoc +++ b/webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content1.adoc @@ -4,7 +4,7 @@ SQL is a standardized (ANSI in 1986, ISO in 1987) programming language which is A database is a collection of data. Data is organized into rows, columns and tables, and it is indexed to make it easier to find relevant information. -Example SQL table with employees: +Example SQL table with employees, the name of the table is 'employees': Employees Table |===