− Vulnerable 
// SQL Injection
const query = `
  SELECT * FROM users
  WHERE email = '${userInput}'
`;
db.execute(query);
+ Secure 
// Parameterized Query
const query = `
  SELECT * FROM users
  WHERE email = ?
`;
db.execute(query, [userInput]);

Learn From Broken Code

Real exploits. Working fixes. One line at a time.

Recent Vulnerabilities

// Recent Vulnerabilities

All