Apr 21: SQL Injection, Hotel queries

Learning Objectives

After today's class, you should be able to:

• Understand database security issues including SQL injection.

Lesson

• Resubmit last week's in-class exercise, if necessary.

Slides Database Security

Example vulnerable application:

• hack.py

• hack.html

  • Input 1: '; DROP TABLE account; --
  • Input 2: <script>alert("Hi");</script>

• Discuss HW7 and introduce HW8

Your To-Do List

• Start working on HW8