From 98a32c7cdff723d78575c39cdcbddff64d41fb46 Mon Sep 17 00:00:00 2001
From: Bene-Notebook <benedikt.stuhrmann@gmail.com>
Date: Tue, 27 Nov 2018 11:18:40 +0100
Subject: [PATCH] Fixed bug, where assignment hints did not get displayed.
---
.../webgoat/plugin/introduction/SqlInjectionLesson10.java | 4 ++--
.../sql-injection/src/main/resources/html/SqlInjection.html | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson10.java b/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson10.java
index ca59512bd..1f30c7a05 100644
--- a/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson10.java
+++ b/webgoat-lessons/sql-injection/src/main/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson10.java
@@ -20,8 +20,8 @@ public class SqlInjectionLesson10 extends AssignmentEndpoint {
@RequestMapping(method = RequestMethod.POST)
public
@ResponseBody
- AttackResult completed(@RequestParam String action) {
- return injectableQueryAvailability(action);
+ AttackResult completed(@RequestParam String action_string) {
+ return injectableQueryAvailability(action_string);
}
protected AttackResult injectableQueryAvailability(String action) {
diff --git a/webgoat-lessons/sql-injection/src/main/resources/html/SqlInjection.html b/webgoat-lessons/sql-injection/src/main/resources/html/SqlInjection.html
index e1a2f8a9d..8d3b99daf 100644
--- a/webgoat-lessons/sql-injection/src/main/resources/html/SqlInjection.html
+++ b/webgoat-lessons/sql-injection/src/main/resources/html/SqlInjection.html
@@ -285,7 +285,7 @@
<table>
<tr>
<td><label>Action contains:</label></td>
- <td><input name="action" value="" type="TEXT"/></td>
+ <td><input name="action_string" value="" type="TEXT"/></td>
</tr>
<tr>
<td><button type="SUBMIT">Search logs</button></td>