Test Davidson CI security detection
This commit is contained in:
@@ -0,0 +1,12 @@
|
||||
cat > vulnerable-test.php <<'PHP'
|
||||
<?php
|
||||
|
||||
$id = $_GET['id'];
|
||||
|
||||
$db = new PDO('sqlite:test.db');
|
||||
|
||||
$query = "SELECT * FROM users WHERE id = " . $id;
|
||||
$result = $db->query($query);
|
||||
|
||||
echo $_GET['message'];
|
||||
PHP
|
||||
Reference in New Issue
Block a user