Quiz
7.3 Discovering Security Issues
Fragen in diesem Quiz (2)
1What is wrong with the following code? (1)
public function showAction() {
$arguments = $this->request->getArguments();
$template = $arguments['template'];
if ($template) {
include $template . '.php';
} else {
include 'default_template.php';
}
...
}- AThe method call should read getArgument('template')
- BThe hasArgument() function should be used to check whether the argument exists
- CThe require function should be used, rather than include
- DA “path traversal” can be injected via the GET/POST argument
- EExtbase should check whether the file exists before including it
2Which statement about the following code in an Extbase repository is correct? (1)
public function selectByPid($pid) {
$query = $this->createQuery();
$select = "SELECT uid FROM table WHERE pid = " . $pid;
return $query->statement($select)->execute(true);
}- AThe method execute() does not accept a parameter
- BThe parameter of method statement() can not be a native SQL query
- CThe code shows a possible SQL injection vulnerability
- DThe code is perfectly fine
- EMethod names in repository classes must not start with selectBy
Informationen
- Beschreibung
- Der Nutzer hat seine Fachbereichs-Information gelöscht. Quiz am 7.3 Discovering Security Issues, erstellt von Gelöschter Nutzer am 27/04/2022.
- Autor
- Gelöschter Nutzer
- Sprache
- English
- Aufrufe
- 18
- Verlauf
- Erstellt am 27 Apr 2022 · aktualisiert am 27 Apr 2022
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz