diff options
| author | Marcin Zelent <zelent.marcin@gmail.com> | 2018-05-25 13:15:52 +0200 |
|---|---|---|
| committer | Marcin Zelent <zelent.marcin@gmail.com> | 2018-05-25 13:15:52 +0200 |
| commit | 313c9116d67956daf0c3db9d39eb4824f1613a08 (patch) | |
| tree | 6da7e768e8657a61e0c1f906b345423a3a722795 | |
| parent | 70b9a77d30075212196674e97e547bde16498fd6 (diff) | |
Proofread and fixed some mistakes
| -rw-r--r-- | synopsis.tex | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/synopsis.tex b/synopsis.tex index 4d9a7cf..36494d2 100644 --- a/synopsis.tex +++ b/synopsis.tex @@ -422,7 +422,7 @@ SqlCommand cmd = new SqlCommand(query); cmd.Parameters.AddWithValue("@param_username, username); \end{minted} -This way, if an attacker will send \texttt{login' OR '1'='1} to the application, +This way, if an attacker sends \texttt{login' OR '1'='1} to the application, it will not cause any harm, because the query would simply try to find a user with name \texttt{login' OR '1'='1}. @@ -430,7 +430,7 @@ with name \texttt{login' OR '1'='1}. \subsubsection{How it works} -Cross-Site S |