Code AnalysisIntermediate 50s

Trace: SQL Injection Reachability

Given this Node handler, is the query injectable?

Starter code

const q = "SELECT * FROM users WHERE name='" + req.query.name + "'";
db.query(q);
// req.query.name = "x' OR '1'='1"

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.