codeql-dataflow-sql-injection/README.org

• SQL injection example
  • Setup and sample run

SQL injection example

Setup and sample run

  ./build.sh

  ./admin create-db
  ./admin show-db

  # Add regular user interactively
  ./add-user 2>> users.log
  ./admin show-db

  # Regular user
  echo "sample user" | ./add-user 2>> users.log
  ./admin show-db

  # Johnny Droptable
  echo "Johnny'); DROP TABLE users; -- " | ./add-user 2>> users.log

  ./admin show-db