dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

SQLPLUS does not process CREATE PROCEDURE lines without a trailing /

Browse Source 
git-svn-id: http://webgoat.googlecode.com/svn/trunk@175 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
rogan.dawes 2007-07-11 12:56:33 +00:00
parent 7bb2c087a0
commit afb5b9e740
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
webgoat/main/project/WebContent/WEB-INF/webgoat_oracle.sql
View File

@ -1,4 +1,4 @@
DROP USER webgoat; DROP USER webgoat CASCADE;
CREATE USER webgoat IDENTIFIED BY webgoat DEFAULT TABLESPACE users; CREATE USER webgoat IDENTIFIED BY webgoat DEFAULT TABLESPACE users;
GRANT CONNECT, RESOURCE TO webgoat; GRANT CONNECT, RESOURCE TO webgoat;
GRANT CREATE PROCEDURE TO webgoat; GRANT CREATE PROCEDURE TO webgoat;
@ -9,6 +9,7 @@ BEGIN
stmt := 'SELECT USERID FROM EMPLOYEE WHERE USERID = ' || v_id || ' AND PASSWORD = ''' || v_password || ''''; stmt := 'SELECT USERID FROM EMPLOYEE WHERE USERID = ' || v_id || ' AND PASSWORD = ''' || v_password || '''';
EXECUTE IMMEDIATE stmt INTO v_userid; EXECUTE IMMEDIATE stmt INTO v_userid;
END; END;
/
CREATE OR REPLACE PROCEDURE EMPLOYEE_LOGIN_BACKUP(v_id NUMBER, v_password VARCHAR) AS CREATE OR REPLACE PROCEDURE EMPLOYEE_LOGIN_BACKUP(v_id NUMBER, v_password VARCHAR) AS
stmt VARCHAR(32767);v_userid NUMBER; stmt VARCHAR(32767);v_userid NUMBER;
@ -16,6 +17,7 @@ BEGIN
stmt := 'SELECT USERID FROM EMPLOYEE WHERE USERID = ' || v_id || ' AND PASSWORD = ''' || v_password || ''''; stmt := 'SELECT USERID FROM EMPLOYEE WHERE USERID = ' || v_id || ' AND PASSWORD = ''' || v_password || '''';
EXECUTE IMMEDIATE stmt INTO v_userid; EXECUTE IMMEDIATE stmt INTO v_userid;
END; END;
/
CREATE OR REPLACE PROCEDURE UPDATE_EMPLOYEE( CREATE OR REPLACE PROCEDURE UPDATE_EMPLOYEE(
v_userid IN employee.userid%type, v_userid IN employee.userid%type,
@ -57,6 +59,7 @@ BEGIN
WHERE WHERE
userid = v_userid; userid = v_userid;
END; END;
/
CREATE OR REPLACE PROCEDURE UPDATE_EMPLOYEE_BACKUP( CREATE OR REPLACE PROCEDURE UPDATE_EMPLOYEE_BACKUP(
v_userid IN employee.userid%type, v_userid IN employee.userid%type,
@ -98,6 +101,9 @@ BEGIN
WHERE WHERE
userid = v_userid; userid = v_userid;
END; END;
/
exit; exit;