- Assuming you are user 21406f6d-787f-4db2-b02b-d38e3f892133, how to get the private data of user ed8fd34e-3c57-47f9-9cfa-594bb74ca8b5 by sql injection ?
Hacker can enter the link: (http://localhost:3000/?user=jdvbj"%20OR%20"1=1)
This is similar to executing the query: SELECT * from ? where user="jdvbj" OR "1=1" Which returns all data stored.
- How to prevent sql injection vulnerability above by
a. improving the flawed code?
Use placeholders (?) as shown on code above.
b. applying infrastructural tools?
We can use Selenium for automated testing. There exist other tools like SQLMap or jSQL.
3.How to automate a sql injection security test with CI/CD systems?
We can set up automated testing pipeline to test for SQL injection on circle ci. We can use a library called "jest" in javascript and write test cases.
