Questions 5 and 6 require the use of SQL injection. This is a process of trial and error. The difficulty with SQL injections is that the attacker does not control the entirety of the SQL statement because the input provided via the search bar is being added into a section of the SQL statement. This means that the SQL injection itself will not be a valid SQL statement - the combination of the existing SQL statement, plus the SQL injection will need to be a valid SQL statement. This means the SQL injection must be carefully crafted so that the final SQL statement is valid. In the case of this challenge, the SQL statement being executed is:

7.23 main lab 7 - online shopping cart background this main lab extends the earlier prep lab "online shopping cart part 1". (you should save this as a separate project from the earlier prep lab). you will create an on-line shopping cart like you might use for your on-line purchases. the goal is to become comfortable with setting up classes and using objects. requirements this lab can be done individually or as pair programming. expanded itemtopurchase class (15 points) extend the itemtopurchase class as follows. we will not do unit testing in this lab so we will not be giving you the names of the member functions. create good ones on your own. create a parameterized constructor to assign item name, item description, item price, and item quantity (default values of "none" for name and description, and 0 for price and quantity). additional public member functions set an item description get an item description print the cost of an item - outputs the item name followed by the quantity, price, and subtotal (see example) print the description of an item - outputs the item name and description (see example) additional private data members a string for the description of the item. example output of the function which prints the cost of an item: bottled water 10 @ $1.50 = $15.00 example output of the function which prints the item description: