Highlight: THM: Advent of Cyber 2022 [Day 16] Secure Coding SQLi’s the king, the carolers sing
10:00 Story Readthrough
19:00 Flag 1 - elf.php intval() sanitization
24:05 Flag 2 - search-toys.php prepared statements
33:25 Flag 3 - toy.php intval() sanitization
37:30 Flag 4 - login.php prepared statements
41:30 Wrap-up & Outro
Set to have all their apps secured, the elves turned towards the one Santa uses to manage the present deliveries for Christmas. Elf McSkidy asked Elf Exploit and Elf Admin to assist you in clearing the application from SQL injections. When presented with the app's code, both elves looked a bit shocked, as none of them knew how to make any sense of it, let alone fix it. "We used to have an Elf McCode, but he founded a startup and helps us no more", said Admin.
After a bit of talk, it was decided. The elves returned carrying a pointy hat and appointed you as the new Elf McCode. Congratulations on your promotion!
[https://tryhackme.com/room/adventofcyber4](https://tryhackme.com/room/adventofcyber4) -- Watch live at https://www.twitch.tv/msec