SQL: SELECT * FROM orders WHERE id = 1002
DRIVER: PDO sqlite3 / PHP 8.5.11
SQL: SELECT name, price, qty FROM order_items WHERE order_id = ?
PARAMS: [1002]
DRIVER: PDO sqlite3 / PHP 8.5.11
Order 1002 - OWASP Shop Lab (PHP)
Training target. This page is intentionally vulnerable.
Keep this deployment private - see README.
Order 1002
| Order | 1002 |
|---|
| User | 3 |
|---|
| Total | $199.00 |
|---|
| Status | paid |
|---|
| Recipient | Bob |
|---|
| Phone | 13800000003 |
|---|
| Address | 3 Lab Road, Test City |
|---|
| Card |
4333333333333330 |
|---|
| Placed | 2026-09-28 03:13:42 |
|---|
Items
| Item | Price | Qty |
|---|
| Noise Cancelling Headset |
$199.00 |
1 |
LAB