SQL: SELECT * FROM orders WHERE id = 1001
DRIVER: PDO sqlite3 / PHP 8.5.11
SQL: SELECT name, price, qty FROM order_items WHERE order_id = ?
PARAMS: [1001]
DRIVER: PDO sqlite3 / PHP 8.5.11
Order 1001 - OWASP Shop Lab (PHP)
Training target. This page is intentionally vulnerable.
Keep this deployment private - see README.
Order 1001
| Order | 1001 |
|---|
| User | 2 |
|---|
| Total | $168.90 |
|---|
| Status | paid |
|---|
| Recipient | Alice |
|---|
| Phone | 13800000002 |
|---|
| Address | 2 Lab Road, Test City |
|---|
| Card |
4222222222222220 |
|---|
| Placed | 2026-09-28 03:13:42 |
|---|
Items
| Item | Price | Qty |
|---|
| Mechanical Keyboard |
$89.90 |
1 |
| Wireless Mouse |
$39.50 |
2 |
LAB