GU Glitcher UniversitySTUDENT PORTAL · Fall 2025

Campus Store

Filter by category: apparel stationery electronics services

Premium Transcript (official)

services · $50.0

Sealed official transcript, mailed.

Buy

Objective  Make the store reveal a hidden, UNRELEASED product the normal filter hides.

💡 Show hint

The category filter is put straight into the SQL. Close the quote and add OR '1'='1, or UNION SELECT the products where released=0.

FlawUser input is concatenated into the SQL string (SQL injection). FixUse parameterised queries / prepared statements.