From 84f01ba70af4a84e0653aa42f7d4aa677130bcfe Mon Sep 17 00:00:00 2001
From: mayhew64 <mayhew64@4033779f-a91e-0410-96ef-6bf7bf53c507>
Date: Fri, 4 Apr 2008 12:54:36 +0000
Subject: [PATCH] Fix for Issue 5. Removed single ticks on hint for order by
clause.
git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@295 4033779f-a91e-0410-96ef-6bf7bf53c507
---
.../org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java b/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java
index 055077ec2..8f69a2549 100644
--- a/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java
+++ b/main/project/JavaSource/org/owasp/webgoat/lessons/SQLInjection/SQLInjection.java
@@ -112,7 +112,7 @@ public class SQLInjection extends GoatHillsFinancial
.add("Many of WebGoat's database queries are already parameterized. Search the project for PreparedStatement.");
// Stage 3
- hints.add("Try entering an employee_id of [ 101 OR 1=1 ORDER BY 'salary' ].");
+ hints.add("Try entering an employee_id of [ 101 OR 1=1 ORDER BY salary ].");
// Stage 4