Internal Staff Portal
SQL Injection demo — before / after
Checking DB…
🔴 Vulnerable code
🟢 Secure (fixed)
Staff Login
Username
Password
Normal login
The attack
Log in
Mode:
Vulnerable
Live SQL — what the server actually ran
Run a login to see the query…