Merge branch 'pmo-229-reflection-fix' into 'master'

Fix unsafe reflection demo See merge request solutions-architecture/verademo!44
veracode · Aug 14, 2018 · 3db9e70 · 3db9e70
2 parents 6637f02 + cd285ca
commit 3db9e70
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/java/com/veracode/verademo/commands/RemoveAccountCommand.java b/src/main/java/com/veracode/verademo/commands/RemoveAccountCommand.java
@@ -34,7 +34,7 @@ public void execute(String blabberUsername) {
 			action.setString(2, blabberUsername);
 			action.execute();
 
-			sqlQuery = "SELECT blab_name FROM users WHERE username = " + blabberUsername;
+			sqlQuery = "SELECT blab_name FROM users WHERE username = '" + blabberUsername +"'";
 			Statement sqlStatement = connect.createStatement();
 			logger.info(sqlQuery);
 			ResultSet result = sqlStatement.executeQuery(sqlQuery);
@@ -46,7 +46,7 @@ public void execute(String blabberUsername) {
 			logger.info(sqlQuery);
 			sqlStatement.execute(sqlQuery);
 
-			sqlQuery = "DELETE FROM users WHERE username = " + blabberUsername;
+			sqlQuery = "DELETE FROM users WHERE username = '" + blabberUsername + "'";
 			logger.info(sqlQuery);
 			sqlStatement.execute(sqlQuery);
 			/* END BAD CODE */