GU Glitcher UniversitySTUDENT PORTAL · Fall 2025

Campus Store

Filter by category: apparel stationery electronics services

Lab Notebook

stationery · $6.5

A4, 120 pages.

Buy

Objective  Make the store reveal a hidden, UNRELEASED product the normal filter hides.

💡 Show hint

The category filter is put straight into the SQL. Close the quote and add OR '1'='1, or UNION SELECT the products where released=0.

FlawUser input is concatenated into the SQL string (SQL injection). FixUse parameterised queries / prepared statements.