OWASP Shop Lab (PHP) mode: secure switch login

LAB hint panel - login

  • A01-02 Authentication bypass
    username: admin' --
  • A07-01 Username enumeration
    wrong password for a known user
  • A07-05 Remember-me stores plaintext password
    inspect cookies
  • A01-11 Open redirect via next
    ?next=https://example.com

Login

Accounts: admin/admin123, alice/alice123, bob/123456, carol/password.

LAB