the-web-application-hackers-handbook

Chapter 19 n Finding Vulnerabilities in Source Code 745
s.setString(1, genre);
s.setString(2, album);
s.executeQuery();
Which of these methods is more secure, and why?
4. You are reviewing the codebase of a Java application. During initial reconnaissance,
you search for all uses of the HttpServletRequest.getParameter
API. The following code catches your eye:
private void setWelcomeMessage(HttpServletRequest request) throws
ServletException
{
String name = request.getParameter(“name”);
if (name == null)
name = “”;
}
m_welcomeMessage = “Welcome “ + name +”!”;
What possible vulnerability might this code indicate? What further code
analysis would you need to perform to confirm whether the application
is indeed vulnerable?
5. You are reviewing the mechanism that an application uses to generate
session tokens. The relevant code is as follows:
public class TokenGenerator
{
private java.util.Random r = new java.util.Random();
public synchronized long nextToken()
{
long l = r.nextInt();
long m = r.nextInt();
}
}
return l + (m