C# (CSharp) testcases.CWE566_Authorization_Bypass_Through_SQL_Primary CWE566_Authorization_Bypass_Through_SQL_Primary__Web_67b Examples

Example #1

File: CWE566_Authorization_Bypass_Through_SQL_Primary__Web_67a.cs Project: Anzsley/Juliet_Test_Suite_v1.3_for_C_Sharp

        /* goodG2B() - use goodsource and badsink */
        private static void GoodG2B(HttpRequest req, HttpResponse resp)
        {
            string data;

            /* FIX: Use a hardcoded user ID */
            data = "10";
            Container dataContainer = new Container();

            dataContainer.containerOne = data;
            CWE566_Authorization_Bypass_Through_SQL_Primary__Web_67b.GoodG2BSink(dataContainer, req, resp);
        }

Example #2

File: CWE566_Authorization_Bypass_Through_SQL_Primary__Web_67a.cs Project: Anzsley/Juliet_Test_Suite_v1.3_for_C_Sharp

        public override void Bad(HttpRequest req, HttpResponse resp)
        {
            string data;

            /* FLAW: Get the user ID from a URL parameter */
            data = req.Params.Get("id");
            Container dataContainer = new Container();

            dataContainer.containerOne = data;
            CWE566_Authorization_Bypass_Through_SQL_Primary__Web_67b.BadSink(dataContainer, req, resp);
        }