From 89672a004f4f175f6f0f0465b0047d3e62bd859e Mon Sep 17 00:00:00 2001
From: SamHeadrickCx <96081318+SamHeadrickCx@users.noreply.github.com>
Date: Tue, 17 Sep 2024 16:10:06 -0400
Subject: [PATCH 1/2] Update ForgotPassword.jsp

---
 src/main/webapp/ForgotPassword.jsp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/main/webapp/ForgotPassword.jsp b/src/main/webapp/ForgotPassword.jsp
index b56f6cb..d4a8c1c 100644
--- a/src/main/webapp/ForgotPassword.jsp
+++ b/src/main/webapp/ForgotPassword.jsp
@@ -39,7 +39,7 @@ if(request.getParameter("secret")!=null)
                  Connection con=new DBConnect().connect(getServletContext().getRealPath("/WEB-INF/config.properties"));
                   ResultSet rs=null;
                   Statement stmt = con.createStatement();  
-                  rs=stmt.executeQuery("select * from users where username='"+request.getParameter("username").trim()+"' and secret='"+request.getParameter("secret")+"'");
+                  //rs=stmt.executeQuery("select * from users where username='"+request.getParameter("username").trim()+"' and secret='"+request.getParameter("secret")+"'");
                   if(rs != null && rs.next()){
                       out.print("Hello "+rs.getString("username")+", <b class='success'> Your Password is: "+rs.getString("password"));
                   }
@@ -51,4 +51,4 @@ if(request.getParameter("secret")!=null)
                   
 %>
                
-  <%@ include file="footer.jsp" %>
\ No newline at end of file
+  <%@ include file="footer.jsp" %>

From 92d5df644ad0cf21a50c907ae46f63e128b40ed4 Mon Sep 17 00:00:00 2001
From: SamHeadrickCx <96081318+SamHeadrickCx@users.noreply.github.com>
Date: Wed, 9 Oct 2024 11:54:00 -0400
Subject: [PATCH 2/2] Update changeCardDetails.jsp

---
 src/main/webapp/changeCardDetails.jsp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/main/webapp/changeCardDetails.jsp b/src/main/webapp/changeCardDetails.jsp
index ca164c7..d29fa6b 100644
--- a/src/main/webapp/changeCardDetails.jsp
+++ b/src/main/webapp/changeCardDetails.jsp
@@ -40,7 +40,7 @@ if(session.getAttribute("isLoggedIn")!=null)
         if(!cardno.equals("") && !cvv.equals("") && !expirydate.equals(""))
         {
          Statement stmt = con.createStatement();
-         stmt.executeUpdate("INSERT into cards(id,cardno, cvv,expirydate) values ('"+id+"','"+cardno+"','"+cvv+"','"+expirydate+"')");
+         //stmt.executeUpdate("INSERT into cards(id,cardno, cvv,expirydate) values ('"+id+"','"+cardno+"','"+cvv+"','"+expirydate+"')");
          out.print("<b style='color:green'> * Card details added *</b>");   
         }
         else
@@ -67,4 +67,4 @@ else
   <!-- CSRF  -->
 <!-- Insecure Direct Object Reference 2 -->
   
- <%@ include file="/footer.jsp" %>
\ No newline at end of file
+ <%@ include file="/footer.jsp" %>