9ea97126b8
Rather than constructing URL's manually all the time, rather make use of existing mechanisms to create the URL, and use it consistently. git-svn-id: http://webgoat.googlecode.com/svn/trunk@184 4033779f-a91e-0410-96ef-6bf7bf53c507
22 lines
866 B
Plaintext
Executable File
22 lines
866 B
Plaintext
Executable File
<%@ page contentType="text/html; charset=ISO-8859-1" language="java"
|
|
import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.DBCrossSiteScripting.DBCrossSiteScripting"
|
|
errorPage="" %>
|
|
<div id="lesson_search">
|
|
<%
|
|
WebSession webSession = ((WebSession)session.getAttribute("websession"));
|
|
String searchedName = request.getParameter(DBCrossSiteScripting.SEARCHNAME);
|
|
if (searchedName != null)
|
|
{
|
|
%>
|
|
Employee <%=searchedName%> not found.
|
|
<%
|
|
}
|
|
%>
|
|
<form id="form1" name="form1" method="post" action="<%=webSession.getCurrentLesson().getFormAction()%>">
|
|
<label>Name
|
|
<input class="lesson_text_db" type="text" name="<%=DBCrossSiteScripting.SEARCHNAME%>"/>
|
|
</label>
|
|
<br>
|
|
<input type="submit" name="action" value="<%=DBCrossSiteScripting.FINDPROFILE_ACTION%>"/>
|
|
</form>
|
|
</div> |