Practice / Software

Find and fix SQL injection

Medium · Coding (typed)

Review this login code and fix it: query = "SELECT * FROM users WHERE email = '" + email + "' AND password = '" + password + "'" user = db.execute(query).fetchone() Show an input that breaks it, rewrite it safely, and point out anything else wrong.

Create a free account to answer it and get scored on what a strong answer covers.