Fix SQL injection in a user lookup
Not solvedA support tool builds SQL by concatenating a name from the URL. Parameterise it without breaking lookups.
- Level
- Foundational
- Estimated time
- ~20 min
- Points
- 0/70 pts
- Questions
- 0/0 answered
- OWASP
- A05:2025
- CWE
- CWE-89
users.js
Test results
Run the tests to check your code. It runs on the server in an isolated sandbox with no network access.