add sql injection test

internal/controllers/controllers_test.go

@@ -10,6 +10,7 @@ import (
 	"path/filepath"
 	"strconv"
 	"testing"
+	"time"
 
 	"log"
 
@@ -36,6 +37,11 @@ const (
 	Port int = 2525
 )
 
+type loginInput struct {
+	Email    string `json:"email"`
+	Password string `json:"password"`
+}
+
 var (
 	Uc *UserController
 	Mc *MembershipController
@@ -73,6 +79,9 @@ func TestSuite(t *testing.T) {
 	if err := os.Setenv("BASE_URL", "http://"+Host+":2525"); err != nil {
 		log.Fatalf("Error setting environment variable: %v", err)
 	}
+	if err := os.Setenv("DB_PATH", "test.db"); err != nil {
+		log.Fatalf("Error setting environment variable: %v", err)
+	}
 	config.LoadConfig()
 	if err := database.Open("test.db", config.Recipients.AdminEmail); err != nil {
 		log.Fatalf("Failed to create DB: %#v", err)
@@ -100,13 +109,14 @@ func TestSuite(t *testing.T) {
 		log.Fatalf("Failed to init Subscription plans: %#v", err)
 	}
 
-	// Run all tests
-	// code := m.Run()
-
 	t.Run("userController", func(t *testing.T) {
 		testUserController(t)
 	})
 
+	t.Run("SQL_Injection", func(t *testing.T) {
+		testSQLInjectionAttempt(t)
+	})
+
 	t.Run("contactController", func(t *testing.T) {
 		testContactController(t)
 	})
@@ -115,6 +125,10 @@ func TestSuite(t *testing.T) {
 		testMembershipController(t)
 	})
 
+	t.Run("XSSAttempt", func(t *testing.T) {
+		testXSSAttempt(t)
+	})
+
 	if err := utils.SMTPStop(); err != nil {
 		log.Fatalf("Failed to stop SMTP Mockup Server: %#v", err)
 	}
@@ -195,6 +209,24 @@ func GetMockedFormContext(formData url.Values, url string) (*gin.Context, *httpt
 	return c, w, router
 }
 
+func getBaseUser() models.User {
+	return models.User{
+		DateOfBirth:    time.Date(2000, time.January, 1, 0, 0, 0, 0, time.UTC),
+		FirstName:      "John",
+		LastName:       "Doe",
+		Email:          "john.doe@example.com",
+		Address:        "Pablo Escobar Str. 4",
+		ZipCode:        "25474",
+		City:           "Hasloh",
+		Phone:          "01738484993",
+		BankAccount:    models.BankAccount{IBAN: "DE89370400440532013000"},
+		Membership:     models.Membership{SubscriptionModel: models.SubscriptionModel{Name: "Basic"}},
+		ProfilePicture: "",
+		Password:       "password123",
+		Company:        "",
+	}
+}
+
 func deleteTestDB(dbPath string) error {
 	err := os.Remove(dbPath)
 	if err != nil {