Added command injection example and secured examples

1 files changed, 17 insertions, 0 deletions

diff --git a/examples-secure/command-injection/command-injection.c b/examples-secure/command-injection/command-injection.c
new file mode 100644
index 0000000..01eb15d
--- /dev/null
+++ b/examples-secure/command-injection/command-injection.c
@@ -0,0 +1,17 @@
+#include <stdlib.h>
+#include <string.h>
+
+int main(int argc, char **argv)
+{
+	int argl = strlen(argv[1]);
+	char cmd[argl + 6];
+
+	for (int i = 0; i < argl; i++)
+		if (argv[1][i] == ';' || argv[1][i] == '|' || argv[1][i] == '&')
+			argv[1][i] = ' ';
+	strcpy(cmd, "echo ");
+	strcat(cmd, argv[1]);
+	system(cmd);
+
+	return 0;
+}