SQL Injection

Reference: https://habr.com/ru/articles/148151/

Example:

import sqlite3  
  
  
def register(username: str, password: str) -> None:  
    with sqlite3.connect("../homework.db") as conn:  
        cursor = conn.cursor()  
        cursor.executescript(  
            f"""  
            INSERT INTO `table_users` (username, password)            VALUES ('{username}', '{password}')    
"""  
        )  
        conn.commit()  
  
  
def hack() -> None:  
    username: str = "I like"  
    password: str = "SQL Injection'); DROP TABLE table_users; --"  
    register(username, password)  
  
  
if __name__ == "__main__":  
    register("wignorbo", "sjkadnkjasdnui31jkdwq")  
    hack()

---

📂 SQL | Последнее изменение: 19.12.2023 19:56