john
/
mooc-securing-software-21-projects
1
0
Fork 0
Code

Add commented out fix

This commit is contained in:
John Ahlroos 2021-03-03 08:47:58 +02:00
parent 09fee6956e
commit e83a95367c
Signed by: john
GPG Key ID: 258D0F70DB84CD5D
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
project1/README.md
View File

@ -2,8 +2,7 @@
This project is course project (Project 1) for the online course https://cybersecuritybase.mooc.fi/. This project is course project (Project 1) for the online course https://cybersecuritybase.mooc.fi/.
The project *SHOULD NOT* be used for anything else than for the project course as it is insecure and The project *SHOULD NOT* be used for anything else than for the project course as it is insecure and against all best security practices.
against all best security practices.
## Getting started ## Getting started

1
project1/project1/views.py
View File

@ -23,6 +23,7 @@ def all_products(request):
products = Product.objects.all() products = Product.objects.all()
return render(request, "index.html", {"products": products}) return render(request, "index.html", {"products": products})
#@login_required(login_url='/login')
def filtered_products(request): def filtered_products(request):
filter = request.GET.get('filter', '') filter = request.GET.get('filter', '')
products = Product.objects.raw("SELECT * FROM project1_Product where name like '%" + filter + "%'") products = Product.objects.raw("SELECT * FROM project1_Product where name like '%" + filter + "%'")