Skip to content

Releases: li-xin-yi/SQL-inject-demo

Adjust the layout to fit more devices

15 Jul 04:46
Compare
Choose a tag to compare
  1. Adjust the layout
  2. Link enter with "Sign in" Button in password input of the main activity

Fix typo in database

22 Jun 04:02
Compare
Choose a tag to compare
  1. Boby -> Bobby, Samy -> Sammy
  2. Change their corresponding password
  3. Modify the format of phone number

A SQL injection demo on mobile app with safe countermeasures

18 Jun 10:40
Compare
Choose a tag to compare

image

Based on the previous version I developed a few days ago

  1. Add a safe mode as
query = "SELECT * FROM "+ TABLE_NAME + " WHERE NAME=? AND PASSWORD=?";
cursor = db.rawQuery(query, new String[]{username,password});

Instead of direct joining variables.

  1. Add a rest button to reset the polluted SQLite database as the initial table.
  2. Admin now can insert or delete employees in the database. I add this functionality for more flexible test and demo on custom data.
  3. Detailed instructions to explore this app can be found in this manual

base version

15 Jun 11:32
Compare
Choose a tag to compare
base version Pre-release
Pre-release

Basic release