National Institute of Standards and Technology
Package illustrating a test case

Test case 426457

Description

Source: filter_input_array_prm__(INPUT_GET)_(((t),(FILTER_SANITIZE_SPECIAL_CHARS)))
Sanitization: preg_replace_prm__(_'_)_()
Dataflow: assignment
Context: sql_apostrophe
Sink: sqlsrv_query_prm__<$>(db)

Flaws

Test Suites

Have any comments on this test case? Please, send us an email.