I'm studying Internet Security and I learned something about code injection in older websites (using the string
' OR 1 == 1 // as a username will log in with any password provided); but what if a password related to a username is stored in the server in a folder with the following path:
with credentials that will log me into the system, without knowing any legitimate usernames or passwords?
Furthermore, in the question it's specified that the login system is installed on a computer running an OS, and that this operating system is known to have a file with its version (in this case, 1.0.3) in
Honestly, I do not know how this last thing can be related to the question, but I hope that someone can help me to understand what could be the right answer and if and how this thing about the system version is related to the answer.
Here is the screenshot of the question of the online test I'm doing: