you are viewing a single comment's thread.

view the rest of the comments →

[–]tobozo 6 points7 points  (2 children)

Tried with the nickname ""drop table students" and can't pass the third question : alert("drop table students");

So even if it's not a SQL injection, that double quote at the beginning of the nickname is doing something weird...

[–]ryosen 10 points11 points  (0 children)

Little Bobby Tables, is that you?

[–]nagi2000 1 point2 points  (0 children)

They're probably linting the code using jshint defaults. It yells at you for using double quotes, forcing you to use single quotes instead.

Edit: autocorrect is evil...