Assumethatadatabaseonlystoresthesha$256$valueforthepasswordandeidcolumns.

The following SQL statement is sent to the database, where the values of the $passwd

and $eid variables are provided by users. Does this program have a SQL injection

problem? If so$,$ please describe how to exploit this vulnerability.

$sql $=$ "SELECT $*$ FROM employee

WHERE eid$=$SHA$2($$eid$,256)$ and password$=$SHA$2($$passwd$,256)"$