Skip to content

Validate if number of travellers is integer #19

Open

Description

@pinkeshbadjatiya

Currently, even the string is getting inserted.
Validate on both frontend and backend.
1

Activity

  1. mrinaldhar commented on Mar 24, 2016

    @mrinaldhar
    Owner

    Is that a valid entry in the db? How'd you get it removed?

  2. pinkeshbadjatiya commented on Mar 24, 2016

    @pinkeshbadjatiya
    ContributorAuthor
    1. I inserted it using the normal form. The db column for travellers is VARCHAR.
      https://github.com/mrinaldhar/CabShare/blob/master/utils/new_cab_share.sql#L37
    2. I actually inserted it in local version hosted on Apache2. Though, i guess site may be vulnerable to sql injection. Will try someday. :)
  3. mrinaldhar commented on Mar 24, 2016

    @mrinaldhar
    Owner
    1. It is very vulnerable to SQL injection. :P There's a lot of work to be done there.
  4. pinkeshbadjatiya commented on Mar 24, 2016

    @pinkeshbadjatiya
    ContributorAuthor

    Lets see if i can apply some of my SSAD work(related to sql injection) here. :P

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions