Test Davidson CI security detection
This commit is contained in:
@@ -0,0 +1,12 @@
|
|||||||
|
cat > vulnerable-test.php <<'PHP'
|
||||||
|
<?php
|
||||||
|
|
||||||
|
$id = $_GET['id'];
|
||||||
|
|
||||||
|
$db = new PDO('sqlite:test.db');
|
||||||
|
|
||||||
|
$query = "SELECT * FROM users WHERE id = " . $id;
|
||||||
|
$result = $db->query($query);
|
||||||
|
|
||||||
|
echo $_GET['message'];
|
||||||
|
PHP
|
||||||
Reference in New Issue
Block a user