Added a vulnerable API module #670
Conversation
I need to make the user system persistent and then add some vulnerabilities. There are already some in there, but we need some good ones.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| $client_secret = $_SERVER['PHP_AUTH_PW']; | ||
|
|
||
| # App auth check | ||
| if ($client_id == "1471.dvwa.digi.ninja" && $client_secret == "ABigLongSecret") { |
Check failure
Code scanning / Secrets Audit
Cleartext Storage of Sensitive Information. Error
| } | ||
|
|
||
| // pass the request method and order ID to the OrderController and process the HTTP request: | ||
| $controller = new OrderController($requestMethod, $version, $orderId); |
Check warning
Code scanning / PHP Security Audit
Class Src \ OrderController has no __construct, but arguments were passed. Warning
| } | ||
|
|
||
| // pass the request method and user ID to the UserController and process the HTTP request: | ||
| $controller = new UserController($requestMethod, $version, $userId); |
Check warning
Code scanning / PHP Security Audit
Class Src \ OrderController has no __construct, but arguments were passed. Warning
| } | ||
|
|
||
| $command = $local_uri[2]; | ||
| $controller = new HealthController($requestMethod, $version, $command); |
Check warning
Code scanning / PHP Security Audit
Class Src \ OrderController has no __construct, but arguments were passed. Warning
| } | ||
|
|
||
| $command = $local_uri[2]; | ||
| $controller = new LoginController($requestMethod, $version, $command); |
Check warning
Code scanning / PHP Security Audit
Class Src \ OrderController has no __construct, but arguments were passed. Warning
| } | ||
|
|
||
| #[OAT\Post( | ||
| tags: ["health"], |
Check warning
Code scanning / PHP Security Audit
Syntax error, unexpected T_STRING on line 22. Warning
| } | ||
|
|
||
| #[OAT\Get( | ||
| tags: ["user"], |
Check warning
Code scanning / PHP Security Audit
Syntax error, unexpected T_STRING on line 22. Warning
| } | ||
|
|
||
| #[OAT\Get( | ||
| tags: ["user"], |
Check warning
Code scanning / PHP Security Audit
Syntax error, unexpected T_STRING on line 22. Warning
| } | ||
|
|
||
| #[OAT\Post( | ||
| tags: ["user"], |
Check warning
Code scanning / PHP Security Audit
Syntax error, unexpected T_STRING on line 22. Warning
| } | ||
|
|
||
| #[OAT\Put( | ||
| tags: ["user"], |
Check warning
Code scanning / PHP Security Audit
Syntax error, unexpected T_STRING on line 22. Warning
| } | ||
|
|
||
| #[OAT\Delete( | ||
| tags: ["user"], |
Check warning
Code scanning / PHP Security Audit
Syntax error, unexpected T_STRING on line 22. Warning
No description provided.