dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixes bug in introduction assignment 3 and adjusted wording in assignment

Browse Source 
1
This commit is contained in:
Max Geldner 2018-11-25 16:51:07 +01:00 committed by Nanne Baars
parent e873752eac
commit 6cf3740c04
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson3.java
View File

@ -70,6 +70,7 @@ public class SqlInjectionLesson3 extends AssignmentEndpoint {
ResultSet _results = check_statement.executeQuery("SELECT * FROM employees WHERE last_name='Barnett';"); ResultSet _results = check_statement.executeQuery("SELECT * FROM employees WHERE last_name='Barnett';");
StringBuffer output = new StringBuffer(); StringBuffer output = new StringBuffer();
// user completes lesson if the department of Tobi Barnett now is 'Sales' // user completes lesson if the department of Tobi Barnett now is 'Sales'
_results.first();
if (_results.getString("department").equals("Sales")) { if (_results.getString("department").equals("Sales")) {
output.append(SqlInjectionLesson8.generateTable(_results)); output.append(SqlInjectionLesson8.generateTable(_results));
return trackProgress(success().feedbackArgs(output.toString()).build()); return trackProgress(success().feedbackArgs(output.toString()).build());

2
webgoat-lessons/sql-injection/src/main/resources/lessonPlans/en/SqlInjection_introduction_content1.adoc
View File

@ -4,7 +4,7 @@ SQL is a standardized (ANSI in 1986, ISO in 1987) programming language which is
A database is a collection of data. Data is organized into rows, columns and tables, and it is indexed to make it easier to find relevant information. A database is a collection of data. Data is organized into rows, columns and tables, and it is indexed to make it easier to find relevant information.
Example SQL table with employees: Example SQL table with employees, the name of the table is 'employees':
Employees Table Employees Table
|=== |===