This "lesson" is to be used as a base for the rest of the LAB lessons. This should help to reduce the amount of duplication across the lessons. git-svn-id: http://webgoat.googlecode.com/svn/trunk@150 4033779f-a91e-0410-96ef-6bf7bf53c507
		
			
				
	
	
		
			22 lines
		
	
	
		
			851 B
		
	
	
	
		
			Plaintext
		
	
	
		
			Executable File
		
	
	
	
	
			
		
		
	
	
			22 lines
		
	
	
		
			851 B
		
	
	
	
		
			Plaintext
		
	
	
		
			Executable File
		
	
	
	
	
| <%@ page contentType="text/html; charset=ISO-8859-1" language="java" 
 | |
| 	import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.GoatHillsFinancial.GoatHillsFinancial" 
 | |
| 	errorPage="" %>
 | |
| 	<div id="lesson_search">
 | |
| 			<% 
 | |
| 			WebSession webSession = ((WebSession)session.getAttribute("websession"));
 | |
| 			String searchedName = request.getParameter(GoatHillsFinancial.SEARCHNAME);
 | |
| 			if (searchedName != null)
 | |
| 			{
 | |
| 			%>
 | |
| 				Employee <%=searchedName%> not found.
 | |
| 			<%
 | |
| 			}
 | |
| 			%>
 | |
| 				<form id="form1" name="form1" method="post" action="attack?menu=<%=webSession.getCurrentMenu()%>">
 | |
| 			    	<label>Name
 | |
| 					<input class="lesson_text_db" type="text" name="<%=GoatHillsFinancial.SEARCHNAME%>"/>
 | |
| 		        </label>
 | |
| 				<br>
 | |
| 				<input type="submit" name="action" value="<%=GoatHillsFinancial.FINDPROFILE_ACTION%>"/>
 | |
| 			</form>
 | |
| 	</div> |