From 24bea3036c7ccda65efd5816f146ff20ecf27c3e Mon Sep 17 00:00:00 2001
From: chandram <chandra.maheshbl@checkmarx.com>
Date: Wed, 24 Nov 2021 10:53:46 +0530
Subject: [PATCH 01/10] CxFlow push to a protected branch

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index 44db148..94a57f8 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,5 @@
+CxFlowMasterPush-Test1
+
 The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
 
 > ### Please note that The BodgeIt Store is no longer being worked on

From eea2fb187c3a52182617a1c84b5edfed13f2dc26 Mon Sep 17 00:00:00 2001
From: CMaheshBL <37871797+CMaheshBL@users.noreply.github.com>
Date: Wed, 24 Nov 2021 13:04:36 +0530
Subject: [PATCH 02/10] added text

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 94a57f8..ceb5b6f 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-CxFlowMasterPush-Test1
+CxFlowMasterPush-Test11
 
 The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
 

From c98867448256cf1790a09c8091448080abb65bc3 Mon Sep 17 00:00:00 2001
From: chandram <chandra.maheshbl@checkmarx.com>
Date: Wed, 24 Nov 2021 13:33:07 +0530
Subject: [PATCH 03/10] CxFlow push to a protected branch- 111

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 94a57f8..e0e8515 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-CxFlowMasterPush-Test1
+CxFlowMasterPush-Test111
 
 The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
 

From 40e8e856244c1b42cb29937cb3f7f97f0f7fcbb1 Mon Sep 17 00:00:00 2001
From: chandram <chandra.maheshbl@checkmarx.com>
Date: Wed, 24 Nov 2021 14:10:15 +0530
Subject: [PATCH 04/10] CxFlow push to a protected branch- 111

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index ceb5b6f..e0e8515 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-CxFlowMasterPush-Test11
+CxFlowMasterPush-Test111
 
 The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
 

From 9c1318120d6d4a20e6427b8a1d205588b80ff519 Mon Sep 17 00:00:00 2001
From: chandram <chandra.maheshbl@checkmarx.com>
Date: Wed, 24 Nov 2021 14:14:05 +0530
Subject: [PATCH 05/10] CxFlow push to a protected branch- 1111

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index e0e8515..fc4abd2 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-CxFlowMasterPush-Test111
+CxFlowMasterPush-Test1111
 
 The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
 

From 9a9bd121dd0dcadedc1fc6608e1602714418679c Mon Sep 17 00:00:00 2001
From: chandram <chandra.maheshbl@checkmarx.com>
Date: Wed, 24 Nov 2021 14:17:24 +0530
Subject: [PATCH 06/10] CxFlow push to a protected branch- 1111

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index fc4abd2..e0e8515 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-CxFlowMasterPush-Test1111
+CxFlowMasterPush-Test111
 
 The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
 

From a67166d262b8ed1dd1f1980840b71c4499e24655 Mon Sep 17 00:00:00 2001
From: chandram <chandra.maheshbl@checkmarx.com>
Date: Wed, 24 Nov 2021 14:18:21 +0530
Subject: [PATCH 07/10] CxFlow push to a protected branch- 1111

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index e0e8515..ceb5b6f 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-CxFlowMasterPush-Test111
+CxFlowMasterPush-Test11
 
 The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
 

From 9496e32b48c810c7e28578f92de92bb348d8b812 Mon Sep 17 00:00:00 2001
From: chandram <chandra.maheshbl@checkmarx.com>
Date: Wed, 24 Nov 2021 14:36:05 +0530
Subject: [PATCH 08/10] CxFlow push to a protected branch- 1

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index ceb5b6f..94a57f8 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-CxFlowMasterPush-Test11
+CxFlowMasterPush-Test1
 
 The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.
 

From 493aa4cd9ad9e8ed34b94ec6d5925bf5ac943fd7 Mon Sep 17 00:00:00 2001
From: chandram <chandra.maheshbl@checkmarx.com>
Date: Wed, 24 Nov 2021 14:45:20 +0530
Subject: [PATCH 09/10] added prepared statement on line 55

---
 root/basket.jsp | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/root/basket.jsp b/root/basket.jsp
index 813dc00..66c6be1 100644
--- a/root/basket.jsp
+++ b/root/basket.jsp
@@ -4,7 +4,7 @@
 <%@ page import="java.math.*" %>
 <%@ page import="java.text.*" %>
 <%@ page import="java.util.*" %>
-
+<%@ page import="java.sql.PreparedStatement" %>
 <%@ include file="/dbconnection.jspf" %>
 
 <script type="text/javascript">
@@ -50,9 +50,14 @@ function decQuantity (prodid) {
 		// Dont need to do anything else
 			
 		// Well, apart from checking to see if they've accessed someone elses basket ;)
-		Statement stmt = conn.createStatement();
-		try {
-			ResultSet rs = stmt.executeQuery("SELECT * FROM Baskets WHERE basketid = " + basketId);
+		//Statement stmt = conn.createStatement();
+        //Security Fix
+        PreparedStatement preparedStatement = con.prepareStatement(sql);
+        try {
+            //ResultSet rs = stmt.executeQuery("SELECT * FROM Baskets WHERE basketid = " + basketId);
+            String sql = "SELECT * FROM Baskets WHERE basketid =?");
+            preparedStatement.setString(1, basketId);
+            ResetSet rs = preparedStatement.executeQuery();
 			rs.next();
 			String bUserId = "" + rs.getInt("userid");
 			if ((userid == null && ! bUserId.equals("0")) || (userid != null && userid.equals(bUserId))) {

From d1863ea135d76e97c39588f486dc23dc6216a910 Mon Sep 17 00:00:00 2001
From: chandram <chandra.maheshbl@checkmarx.com>
Date: Wed, 24 Nov 2021 14:59:15 +0530
Subject: [PATCH 10/10] test11

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 94a57f8..ceb5b6f 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-CxFlowMasterPush-Test1
+CxFlowMasterPush-Test11
 
 The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.