dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added an assignment for compromising availability to the sql injections (introduction).

Browse Source 
WIP
This commit is contained in:
Benedikt - Desktop
2018-11-05 19:39:22 +01:00
committed by Nanne Baars
parent 4e6c721545
commit 6fe7582dfb
7 changed files with 136 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
webgoat-container/src/main/java/org/owasp/webgoat/session/CreateDB.java
View File

@ -988,15 +988,19 @@ public class CreateDB {
private void createEmployeesTable(Connection connection) throws SQLException {
Statement statement = connection.createStatement();
// Drop employees table
// Drop employees and access_log tables
try {
String dropTable = "DROP TABLE employees";
statement.executeUpdate(dropTable);
statement.executeUpdate("DROP TABLE employees");
} catch (SQLException e) {
System.out.println("Info - Could not drop employees table");
}
try {
statement.executeUpdate("DROP TABLE access_log");
} catch (SQLException e) {
System.out.println("Info - Could not drop access_log table");
}
// Create the new table
// Create the employees table
try {
String createTableStatement = "CREATE TABLE employees ("
+ "userid varchar(6) not null primary key,"
@ -1022,6 +1026,18 @@ public class CreateDB {
statement.executeUpdate(insertData3);
statement.executeUpdate(insertData4);
statement.executeUpdate(insertData5);
// Create the logging table
try {
String createTableStatement = "CREATE TABLE access_log ("
+ "id int not null primary key identity,"
+ "time varchar(50),"
+ "action varchar(200)"
+ ")";
statement.executeUpdate(createTableStatement);
} catch (SQLException e) {
System.out.println("Error creating access_log table " + e.getLocalizedMessage());
}
}
/**