GetSession (GET /api/GetSession)
This function return session information including first name, last name, userid and username. Only GET method is supported.
GetSum (POST /api/GetSum)
This function accepts two integers (arg1 and arg2) and returns sum of these. First parameter has input validation implemented, while the second doesn't (it return server error). Supported methods: POST. Authentication not required.
GetProduct (POST /api/GetProduct)
This function accepts two integers (category and id) and returns corresponding product details. Supported methods: POST. Authentication required.
Get User Data (POST /api/GetUserData)
This function accepts one integer (UserID) and returns corresponding user details. Supported methods: POST. Authentication required. SQL injection vulnerability.
Guestbook (POST /api/GuestBook)
This function accepts one text parameter (message) and adds the message to the guestbook. Supported methods: GET, POST, DELETE. Authentication required but not implemented for POST method.