SQL Injection demo

34.1K views

Aside code editor demo

The content of this playground is identical to the one of the previous page. It is just a demo of the aside code presentation of a course.

Run application

Create your playground on Tech.io

This playground was created on Tech.io, our hands-on, knowledge-sharing platform for developers.

Go to tech.io

// {
app.post('/login', function (req, res) {
    var username = req.body.username; // a valid username is admin
    var password = req.body.password; // a valid password is admin123
    var query = "SELECT name FROM user where username = '" + username + "' and password = '" + password + "'";
 
    console.log("username: " + username);
    console.log("password: " + password);
    console.log('query: ' + query);
    
    db.get(query , function(err, row) {
 
        if(err) {
            console.log('ERROR', err);
            res.redirect("/index.html#error");
        } else if (!row) {
            res.redirect("/index.html#unauthorized");
        } else {
            res.send('Hello <b>' + row.name + '</b><br /><a href="/index.html">Go back to login</a>');
        }
    });
 
});
 
app.listen(3000);
 
 

Join the CodinGame community on Discord to chat about puzzle contributions, challenges, streams, blog articles - all that good stuff!

JOIN US ON DISCORD

Online Participants

Aside code editor demo

Ternary Operator

Rich Client Proof of Concept - X11 & fluxbox & Gimp

Apprendre Python dans le secondaire

Tutorial for Bot Programming on CodinGame

Keyboard Shortcuts: