Secure Code Detective

1. Choose Python, JavaScript, or PHP.
2. Read the whole short snippet.
3. Click the one unsafe line.
4. Choose the type of security problem.
5. Read the explanation and safer replacement.

The game never gives a working exploit or malicious input. It teaches recognition and safer coding.

Target: Grades 6–12, especially Intro CS; about 12–15 minutes.

The snippets are intentionally short enough for a Chromebook screen but long enough to avoid a 50/50 line guess. Students do not need to memorize syntax; reasoning about secrets, input, permissions, logging, data storage, and error handling is the learning goal.

The database example names unsafe query construction but never supplies malicious input or an exploit string.

The end screen contains a screenshot-friendly Teacher Snapshot. Nothing is stored in the browser.