Secure Coding

public class PaymentService {
public static void main(String[] args) {
int userId = getUserIdFromRequest();
String creditCard = getCreditCardInfo(userId);
System.out.println("Credit card number: " + creditCard);
}

private static int getUserIdFromRequest() {
return 123; 
}

private static String getCreditCardInfo(int userId) {
// Retrieve and return credit card information for the given user ID
return "1234-5678-9012-3456"; 
}
}

public class ProfileServlet extends HttpServlet {
protected void doPost(HttpServletRequest request, HttpServletResponse response) {
String name = request.getParameter("name");
String bio = request.getParameter("bio");
String website = request.getParameter("website");

User user = new User();
user.setName(name);
user.setBio(bio);
user.setWebsite(website);
// Save the user profile
saveUserProfile(user);

// Redirect to the profile page
response.sendRedirect("/profile");

}
}

public class PLATFORM {
public static void main(String[] args) throws Exception {

Process p = Runtime.getRuntime().exec(args[0]); 
BufferedReader in = new BufferedReader(new InputStreamReader(p.getInputStream()));
String line;
while ((line = in.readLine()) != null) {
System.out.println(line);
}
}
}

public class PizzaDeliveryApp {
public static void main(String[] args) {
Scanner scanner = new Scanner(System.in);
System.out.println("Enter the URL of the pizza menu:");
String menuUrl = scanner.nextLine();

try {
URL url = new URL(menuUrl);
BufferedReader reader = new BufferedReader(new InputStreamReader(url.openStream()));
String inputLine;

while ((inputLine = reader.readLine()) != null) {
System.out.println(inputLine);
}
reader.close();
} catch (MalformedURLException e) {
System.err.println("Invalid URL: " + e.getMessage());
} catch (IOException e) {
System.err.println("Failed to fetch the menu: " + e.getMessage());
}
}
}

public class FileInclusionServlet extends HttpServlet {
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {

String fileName = request.getParameter("file");
FileInputStream fis = new FileInputStream(fileName);
ServletOutputStream outputStream = response.getOutputStream();

int ch;
while ((ch = fis.read()) != -1) {
outputStream.write(ch);
}
fis.close();
outputStream.close();
}
}

// This code allows the user to view a list of accounts by specifying the account ID in the URL parameter
String accountId = request.getParameter("accountId");
Account account = accountDao.getAccountById(accountId);
response.getWriter().write(account.toString());

def get_user(email):
query = "SELECT * FROM users WHERE email = '" + email + "'"
return db.execute(query).fetchone()

const stripe = require('stripe')(
'sk_live_51J9ExampleHardcodedSecretKey'
);

function createResetToken(userId) {
return Math.random().toString(36).slice(2);
}

import os
def ping_host(host):
os.system('ping -c 1 ' + host)

import pickle
def load_session(blob):
return pickle.loads(blob)

@app.delete('/documents/')
def delete_document(doc_id):
db.delete_document(doc_id)
return '', 204

logger.info('User login password=%s', password)
authenticate(user, password)

if submitted_password == stored_password_hash:
grant_access()

filename = request.args.get('file')
with open('/var/app/uploads/' + filename, 'rb') as f:
return f.read()

username = request.form['user']
query = f"//users/user[@name='{username}']"
ldap.search_s(base_dn, ldap.SCOPE_SUBTREE, query)

def calculate(user_formula):
return eval(user_formula)

from Crypto.Cipher import AES
cipher = AES.new(key, AES.MODE_ECB)
ciphertext = cipher.encrypt(pad(plaintext))

import hashlib
stored = hashlib.md5(password.encode()).hexdigest()

const payload = req.body;
const doc = JSON.parse(payload);
if (doc.isAdmin) req.user.role = 'admin';