Skip to content

Conversation

@f4-u57
Copy link

@f4-u57 f4-u57 commented Jan 7, 2024

  • user["rowid"] is always an int after successful login.
  • In case when user["rowid"] is not an int, which can be done with SQLi, int(user["rowid"]) caused a ValueError traceback error message.

@f4-u57 f4-u57 changed the title fix babyweb lv7: add rowid int check fix unintended solve for babyweb lv7: add rowid int check Jan 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant