A basic Python Programming Challenge - GeeksforGeeks

22 Jul, 2021
Heya guys! I am back with another article my previous article on secure coding. This time we are not going to go into any theoretical stuff. Some months ago, I wrote a program in Python for my students so that they can practice basic BODMAS questions. The purpose was that the program should generate random set of questions (number of questions to be entered by the user) and then check whether the entered answer is correct or not. Now, obviously it was quite easy for me to code, But, the thing was I had to ensure that 5/2 = 2.5 is as much correct as 2.500. So, I just couldn’t go and match two strings. I had to come up with a different solution. Just to have fun and see if any of my students or volunteers could come up with a vulnerability in the program, I specifically wrote a weak program. Now, I have modified the program to make it easier for you all to identify the mistakes and the vulnerabilities in it.
Now, here is what I want you to do:
Don’t look at the code. Just compile it, run it and see if you can figure out the vulnerabilities in the code.If you can’t figure out the vulnerabilities in step 1 or even if you did, go and take a look at the program code and try to figure out what are the things you missed!
Don’t look at the code. Just compile it, run it and see if you can figure out the vulnerabilities in the code.
If you can’t figure out the vulnerabilities in step 1 or even if you did, go and take a look at the program code and try to figure out what are the things you missed!
Once you are done, please comment what you think are the vulnerabilities in the code and how will you correct them!
Here we go!!
Given Input:
3
6
-1

Program for the small basic python Challenge
## Note: This program has been modified a bit for## GeeksForGeeks articleimport random,operatorprint ('===========================================')  def randomCalc(i,j):    ops = {'+':operator.add,          '-':operator.sub,          '*':operator.mul,          '/':operator.truediv }    num = [1,2,3,4]    num1,num2 = num[i],num[j]    op = (list(ops.keys()))[i]    answer = round(ops.get(op)(num1,num2),3)    print('What is {} {} {}?\n'.format(num1, op, num2))    return answer  def askQuestion(i):    answer = randomCalc(i,i+1)    guess = float(input())    return guess == answer,answer  def quiz(numOfQues):    print('\nWelcome. This is a '+str(numOfQues)+' question math quiz.')    print('Your answer should be correct to three decimal places.\n')    score = 0    for i in range(numOfQues):        correct,ans = askQuestion(i)        if correct:            score += 1            print('Correct!\n')        else:            print('Incorrect! The correct answer is ' + str(ans)+'\n')    return ('Your score was {}/'+str(numOfQues)).format(score)  # Driver Codeprint (quiz(3))
===========================================

Welcome. This is a 3 question math quiz
 Your answer should be correct to three decimal places.

What is 1 + 2?

Correct!

What is 2 * 3?

Correct!

What is 3 - 4?

Correct!

Your score was 3/3

Please write comments if you find anything incorrect, or you want to share more information about the topic discussed above!!
About the author:
Vishwesh Shrimali is an Undergraduate Mechanical Engineering student at BITS Pilani. He fulfils about all the requirements not taught in his branch- white hat hacker, network security operator, and an ex – Competitive Programmer. As a firm believer in power of Python, his majority work has been in the same language. Whenever he get some time apart from programming, attending classes, watching CSI Cyber, he go for a long walk and play guitar in silence. His motto of life is – “Enjoy your life, ‘cause it’s worth enjoying!”
If you also wish to showcase your blog here, please see GBlog for guest blog writing on GeeksforGeeks.
 
secure-coding
Advanced Computer Subject
GBlog
Python
Writing code in comment?
Please use ide.geeksforgeeks.org,
generate link and share the link here.
Comments
Old Comments
Copying Files to and from Docker Containers
Principal Component Analysis with Python
ML | Stochastic Gradient Descent (SGD)
Fuzzy Logic | Introduction
Getting Started with System Design
Roadmap to Become a Web Developer in 2022
Must Do Coding Questions for Companies like Amazon, Microsoft, Adobe, ...
Socket Programming in C/C++
DSA Sheet by Love Babbar
GET and POST requests using Python