Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- require 'sqlite3'
- DB = SQLite3::Database.new("injection.sqlite")
- puts 'username'
- print '> '
- username = gets.chomp
- puts 'password'
- print '> '
- password = gets.chomp
- sql = "SELECT * FROM users WHERE name = ? AND password = ? "
- puts sql
- gets.chomp
- results = DB.execute(sql, username, password)
- if results.length == 0
- puts "NOT FOUND"
- else
- puts " role for #{username} = #{results[0][2]}"
- end
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement