Overview
As part of my graduation project, I created a lab for practising SQL injection techniques. SQL injection is a common web security vulnerability that allows attackers to interfere with the queries an application makes to its database. The lab provides an isolated environment in which users can learn how the vulnerability works and try several attacks on built-in examples.
Features
The environment includes a login page and a "search products" page. Both are intentionally vulnerable. Users can try bypassing authentication and extracting data from the database.
Technical Details
The application is built with PHP and stores user and product information in SQLite. Its queries are deliberately constructed in a way that makes them vulnerable to SQL injection.
Technologies used
- PHP
- SQLite
- HTML/CSS
- JavaScript
- JQuery
- AJAX