Qwissit TYPO3

TYPO3 security

SQL injection and template injection

12 of 60 questions in the app

SQL injection

  1. When does SQL injection arise? Easy
  2. How do you pass user input safely in the TYPO3 QueryBuilder? Easy
  3. Which TYPO3 table is a typical target of an SQL injection because it contains the backend logins? Easy
  4. What can an attacker achieve in the worst case with an SQL injection? Easy
  5. How does Extbase handle values in repository queries such as $query->equals('title', $title)? Easy
  6. Where should database queries in an extension be located? Easy
  7. How do you handle a page ID from the URL before it goes into a query? Easy
  8. Why should SQL error messages not appear on the live site? Easy

SQL injection

  1. A column name for sorting comes from user input. How do you handle it correctly? Medium
  2. What must you additionally consider in a LIKE search with user input? Medium

SQL injection

  1. A guestbook searches with $sql = "... WHERE bodytext LIKE '%" . $q . "%'". Which correction is complete? Hard
  2. A plugin sorts by a parameter sort and builds orderBy($sort). Which measures are right? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications