%@ page contentType="text/html; charset=ISO-8859-1" language="java" import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.DBCrossSiteScripting.DBCrossSiteScripting" errorPage="" %> <% WebSession webSession = ((WebSession)session.getAttribute("websession")); Employee employee = (Employee) session.getAttribute("DBCrossSiteScripting." + DBCrossSiteScripting.EMPLOYEE_ATTRIBUTE_KEY); DBCrossSiteScripting lesson = (DBCrossSiteScripting) webSession.getCurrentLesson(); // int myUserId = getIntSessionAttribute(webSession, "DBCrossSiteScripting." + DBCrossSiteScripting.USER_ID); %>
First Name: | <%=employee.getFirstName()%> | Last Name: | <%=employee.getLastName()%> |
Street: | <%=employee.getAddress1()%> | City/State: | <%=employee.getAddress2()%> |
Phone: | <%=employee.getPhoneNumber()%> | Start Date: | <%=employee.getStartDate()%> |
SSN: | <%=employee.getSsn()%> | Salary: | <%=employee.getSalary()%> |
Credit Card: | <%=employee.getCcn()%> | Credit Card Limit: | <%=employee.getCcnLimit()%> |
Comments: | <%=employee.getPersonalDescription()%> | Manager: | <%=employee.getManager()%> |
Disciplinary Explanation: | <%=employee.getDisciplinaryActionNotes()%> | Disciplinary Action Dates: | <%=employee.getDisciplinaryActionDate()%> |