Chest/CTF-site-project
Chest/CTF-site-project
1
1
Fork 0
Code Issues Pull Requests Activity

Smol change

Browse Source
This commit is contained in:
Sweetbread 2025-01-26 22:50:50 +03:00
parent fff4031edb
commit 9795f994c3
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
app.py
View File

@ -41,12 +41,10 @@ def sql():
login = request.form['login'] login = request.form['login']
password = request.form['pass'] password = request.form['pass']
cursor = get_db().cursor() cursor = get_db().cursor()
cursor.execute(f'SELECT * FROM Users where login == "{login}"') cursor.execute(f'SELECT * FROM Users WHERE login == "{login}" AND password == "{password}"')
user = cursor.fetchone() user = cursor.fetchone()
if not user: if not user:
return render_template('sql-injection.html', error='catmeow') return render_template('sql-injection.html', error='catmeow')
if password != user[2]:
return render_template('sql-injection.html', error=':p')
return render_template('sql-injection.html', success="popacool") return render_template('sql-injection.html', success="popacool")
return render_template('sql-injection.html') return render_template('sql-injection.html')
@ -64,4 +62,4 @@ def authdata():
app.run() app.run()
connection.close() connection.close()