SQL: SELECT id, user_id, total, status, created_at FROM orders ORDER BY id DESC
DRIVER: PDO sqlite3 / PHP 8.5.11
Orders - OWASP Shop Lab (PHP)
OWASP Shop Lab (PHP) mode: vuln switch login
Training target. This page is intentionally vulnerable. Keep this deployment private - see README.

Orders

Try ?uid=3 or ?id=1001

IDUserTotalStatusPlaced
1003 2 $329.00 paid 2026-09-28 03:13:42 view
1002 3 $199.00 paid 2026-09-28 03:13:42 view
1001 2 $168.90 paid 2026-09-28 03:13:42 view
LAB