[pitboss] phase 08: M6.5 — Patch-validation / fix-validation CI mode

tests/fixtures/baseline_sqli_fixed/handler.py

@@ -0,0 +1,5 @@
+import sqlite3
+
+def get_user(db, user_id):
+    query = "SELECT * FROM users WHERE id = ?"
+    return db.execute(query, (user_id,))

tests/fixtures/baseline_sqli_new/handler.py

@@ -0,0 +1,12 @@
+import os
+import sqlite3
+
+def get_user(db):
+    user_id = os.getenv("USER_ID")
+    query = "SELECT * FROM users WHERE id = ?"
+    return db.execute(query, (user_id,))
+
+def get_post(db):
+    post_id = os.getenv("POST_ID")
+    query = "SELECT * FROM posts WHERE id = " + post_id
+    return db.execute(query)

tests/fixtures/baseline_sqli_vuln/handler.py

@@ -0,0 +1,7 @@
+import os
+import sqlite3
+
+def get_user(db):
+    user_id = os.getenv("USER_ID")
+    query = "SELECT * FROM users WHERE id = " + user_id
+    return db.execute(query)