OBJ33-J. Limit extensibility of classes and methods

class BankOperation {


//The account balance has already been retrieved from the database and stored in the foll variable
  private Integer balance = 5000;

  public BankOperation() {

    //invoke java.lang.Object.getClass to get class instance
    Class clazz = getClass();
    //shows the class of the instantiated object
    System.out.println(clazz);
  }

  public void getBalance() {
    System.out.println("The current balance is: $" + balance);
  }
}

  //This class has been written by the attacker
  public class SubClass extends BankOperation {

    public void getBalance() {

    //The attacker can change his account balance to any value he wants.
    Integer modifiedBalance = 0;
    //to read the new balance from the attacker
    InputStreamReader input = new InputStreamReader(System.in);
    Field balance=null;
    BufferedReader reader = new BufferedReader(input);
    System.out.print("Enter balance: ");
    try {
          modifiedBalance = Integer.parseInt(reader.readLine());

	  //this gets the private field from the superclass
	  balance = this.getClass().getSuperclass().getDeclaredField("balance");

	  //this changes the accessibility so that field can now be accessed
	  if (!Modifier.isPublic(balance.getModifiers())){
	    balance.setAccessible(true);
	  }
	  //retrieve the original balance
	  System.out.println("Original Balance: $"+balance.get(this));
	  //change the balance
	  balance.set(this, modifiedBalance);
	
	  System.out.println("New Balance: $"+balance.get(this));

    } catch (Exception e) { e.printStackTrace(); } 
  }

  public static void main(String[] args) {
    SubClass subclass = new SubClass();
    subclass.getBalance();
  }
}

final class BankOperation{
//...
}