HS-Esslingen/swb6-it-sec
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sql injection in search

Browse source
This commit is contained in:
Florian Hoss 2022-04-07 21:06:30 +02:00
parent 7786e839b0
commit 4a07b461d3
3 changed files with 20 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

11
Lab01/app/database/database.go
View file

@ -34,6 +34,13 @@ func (db *Database) GetAllTasks(username string) []Task {
return tasks
}
func (db *Database) FilteredTasks(username string, filter string) []Task {
var tasks []Task
query := fmt.Sprintf("SELECT * FROM tasks WHERE username = '%s' AND description LIKE '%s'", username, filter)
db.ORM.Raw(query).Scan(&tasks)
return tasks
}
func (db *Database) CreateTask(username string, description string) Task {
task := Task{
ID: 0,
@ -97,7 +104,3 @@ func (db *Database) UserIsLoggedIn(username string) bool {
}
return false
}
func (db *Database) Search(term string) {
db.ORM.Exec("SELECT * FROM tasks")
}