File tree Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Original file line number Diff line number Diff line change 1
- # Hands-on Express SQLi
1
+ # SQL injection with Express and sqlite
2
2
3
3
This application is a demonstration prototype just to show how to perform SQLi attack.
4
4
5
5
## Setting-up
6
6
7
7
### Deploy on heroku
8
8
9
- [ ![ Deploy] ( https://www.herokucdn.com/deploy/button.svg )] ( https://heroku.com/deploy?template=https://github.com/0xdbe/Hands-on-Express-SQLi )
9
+ [ ![ Deploy] ( https://www.herokucdn.com/deploy/button.svg )] ( https://heroku.com/deploy?template=https://github.com/0xdbe-appsec/sqli-express-sqlite )
10
10
11
11
### Deploy on your host
12
12
@@ -50,4 +50,8 @@ Open http://localhost:3000/ and log in with:
50
50
SELECT name FROM user where username = 'admin' --' and password = 'a'
51
51
```
52
52
53
- You are now log in as "Admin",
53
+ You are now log in as "Admin"
54
+
55
+ ### Fix it
56
+
57
+ use prepared statement
You can’t perform that action at this time.
0 commit comments