WebGoat#974: Update the lesson text

djafaka · Apr 2, 2021 · ba2cb7d · ba2cb7d
1 parent de453fa
commit ba2cb7d
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/...ction/src/main/resources/lessonPlans/en/SqlInjection_introduction_content4.adoc b/...ction/src/main/resources/lessonPlans/en/SqlInjection_introduction_content4.adoc
@@ -9,10 +9,9 @@ If an attacker successfully "injects" DCL type SQL commands into a database, he
 * GRANT -  give a user access privileges on database objects
 * REVOKE - withdraw user privileges that were previously given using GRANT
 * Example:
-** GRANT CREATE TABLE +
-   TO operator;
+** GRANT CREATE TABLE TO operator;
 ** This statement gives all users of the operator-role the privilege to create new tables in the database.
 
 
-Try to grant the user group "UnauthorizedUser" the right to alter tables:
+Try to grant rights to the table `grant_rights` to user `unauthorized_user`: