Start the Learning Path from zero or from where you are. Then train a failing kata, a pull request and a C4 diagram. Rufa says why, without handing you the answer.
Input is untrusted and must never change SQL structure.
public Task<List<User>> Search(string name){ return db.Users .FromSqlRaw("SELECT * FROM Users WHERE Name = '" + name + "'") .ToListAsync();}The name is concatenated into the SQL string. Whoever controls the text controls the query. I say why. The fix is yours.
var total = 10;A short explanation with an example, before any question.
Tap blocks, order lines, find the bug or write a line.
Green or red, always with the why, a hint and crowns to earn.
The Learning Path stays free. Katas, reviews and C4 diagrams are Premium. Most people stay on Plus. Yearly includes two months free.
Learn C# step by step.
1,99 €/month
4,99 €/month
8,99 €/month
Monthly renews every month. Yearly charges ten months at once and renews after one year. If you already have a plan, the change stays on that subscription and Stripe charges only the difference.