Adding vuln sqlquery #1
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
SonarCloud Quality Gate failed.
|
|
SonarCloud Quality Gate failed.
|
|
SonarCloud Quality Gate failed.
|
|
SonarCloud Quality Gate failed.
|
|
SonarCloud Quality Gate failed.
|
|
SonarCloud Quality Gate failed.
|
|
SonarCloud Quality Gate failed.
|
|
SonarCloud Quality Gate failed.
|
|
SonarCloud Quality Gate failed.
|
1 similar comment
|
SonarCloud Quality Gate failed.
|
|
SonarCloud Quality Gate failed.
|
|
Kudos, SonarCloud Quality Gate passed!
|
|
SonarCloud Quality Gate failed.
|
|
| { | ||
| $userId = $request->get('id'); | ||
| $sql = "SELECT email FROM user WHERE id='$userId'"; | ||
| $statement = $this->connection->prepare($sql); |
Check failure
Code scanning / SonarCloudsquad-3
Database queries should not be vulnerable to injection attacks
| { | ||
| $userId = $request->get('name'); | ||
| $sql = "SELECT username FROM user WHERE id='$userId'"; | ||
| $statement = $this->connection->prepare($sql); |
Check failure
Code scanning / SonarCloudsquad-3
Database queries should not be vulnerable to injection attacks
|
| { | ||
| $userId = $request->get('id'); | ||
| $sql = "SELECT email FROM user WHERE id='$userId'"; | ||
| $statement = $this->connection->prepare($sql); |
Check failure
Code scanning / SonarCloudStaging
Database queries should not be vulnerable to injection attacks High
| { | ||
| $userId = $request->get('name'); | ||
| $sql = "SELECT username FROM user WHERE id='$userId'"; | ||
| $statement = $this->connection->prepare($sql); |
Check failure
Code scanning / SonarCloudStaging
Database queries should not be vulnerable to injection attacks High
|
| { | ||
| $userId = $request->get('id'); | ||
| $sql = "SELECT email FROM user WHERE id='$userId'"; | ||
| $statement = $this->connection->prepare($sql); |
Check failure
Code scanning / SonarCloudDev
Database queries should not be vulnerable to injection attacks High
| { | ||
| $userId = $request->get('name'); | ||
| $sql = "SELECT username FROM user WHERE id='$userId'"; | ||
| $statement = $this->connection->prepare($sql); |
Check failure
Code scanning / SonarCloudDev
Database queries should not be vulnerable to injection attacks High
|
1 similar comment
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 similar comment
|
No description provided.