search

WebAhead5 / CarShare

A project for sharing cars - test login credentials in Readme
https://cars-sharing.herokuapp.com/
0 stars 0 forks source link

Script injection? #13

Open MoradAbed opened 4 years ago

MoradAbed commented 4 years ago

I guess the SQL queries are exposed to script injections when inserting a new item to the database. for example; https://github.com/WebAhead5/CarShare/blob/master/database/queries.js#L41

Karyum commented 4 years ago

they very much are (SQL injection though not script injection), you guys need to use parameterized values to avoid an sql injection <- click this link