Skip to content

Commit f283279

Browse files
committed
update readme
1 parent be80211 commit f283279

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

README.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
1-
# Hands-on Express SQLi
1+
# SQL injection with Express and sqlite
22

33
This application is a demonstration prototype just to show how to perform SQLi attack.
44

55
## Setting-up
66

77
### Deploy on heroku
88

9-
[![Deploy](https://www.herokucdn.com/deploy/button.svg)](https://heroku.com/deploy?template=https://github.com/0xdbe/Hands-on-Express-SQLi)
9+
[![Deploy](https://www.herokucdn.com/deploy/button.svg)](https://heroku.com/deploy?template=https://github.com/0xdbe-appsec/sqli-express-sqlite)
1010

1111
### Deploy on your host
1212

@@ -50,4 +50,8 @@ Open http://localhost:3000/ and log in with:
5050
SELECT name FROM user where username = 'admin' --' and password = 'a'
5151
```
5252

53-
You are now log in as "Admin",
53+
You are now log in as "Admin"
54+
55+
### Fix it
56+
57+
use prepared statement

0 commit comments

Comments
 (0)