Miscellaneous bug fixes
divide by zero, inaccurate discount and totals, reflection of user input git-svn-id: http://webgoat.googlecode.com/svn/trunk/webgoat@273 4033779f-a91e-0410-96ef-6bf7bf53c507
This commit is contained in:
32
main/project/WebContent/lessons/DBSQLInjection/Login.jsp
Executable file
32
main/project/WebContent/lessons/DBSQLInjection/Login.jsp
Executable file
@ -0,0 +1,32 @@
|
||||
<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
|
||||
import="java.util.*, org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.DBSQLInjection.DBSQLInjection"
|
||||
errorPage="" %>
|
||||
<div id="lesson_login">
|
||||
<div id="lesson_login_txt">
|
||||
<%
|
||||
WebSession webSession = ((WebSession)session.getAttribute("websession"));
|
||||
%>
|
||||
<form id="form1" name="form1" method="post" action="<%=webSession.getCurrentLesson().getFormAction()%>">
|
||||
<label>
|
||||
<select name="<%=DBSQLInjection.EMPLOYEE_ID%>">
|
||||
<%
|
||||
//System.out.println("Retrieving employees list");
|
||||
List employees = (List) session.getAttribute("DBSQLInjection." + DBSQLInjection.STAFF_ATTRIBUTE_KEY);
|
||||
Iterator i = employees.iterator();
|
||||
while (i.hasNext())
|
||||
{
|
||||
EmployeeStub stub = (EmployeeStub) i.next();
|
||||
%>
|
||||
<option value="<%=Integer.toString(stub.getId())%>"><%=stub.getFirstName() + " " + stub.getLastName() + " (" + stub.getRole() + ")"%></option>
|
||||
<%}%>
|
||||
</select>
|
||||
</label>
|
||||
<br>
|
||||
<label>Password
|
||||
<input name="password" type="password" size="10" maxlength="8" />
|
||||
</label>
|
||||
<br>
|
||||
<input type="submit" name="action" value="<%=DBSQLInjection.LOGIN_ACTION%>"/>
|
||||
</form>
|
||||
</div>
|
||||
</div>
|
Reference in New Issue
Block a user