National Institute of Standards and Technology
Package illustrating a test case

Test case 163826

Type
source code
State
bad
Author
Bertrand Stivalet and Aurelien Delaitre
Status
candidate
Language
PHP
Submission Date

Description

Unsafe sample
input : reads the field UserData from the variable $_GET
SANITIZE : use of mysql_real_escape string
construction : concatenation

Flaws

Test Suites

Have any comments on this test case? Please, send us an email.