SQL: SELECT * FROM orders WHERE id = 1003
DRIVER: PDO sqlite3 / PHP 8.5.11
SQL: SELECT name, price, qty FROM order_items WHERE order_id = ?
PARAMS: [1003]
DRIVER: PDO sqlite3 / PHP 8.5.11
Order 1003 - OWASP Shop Lab (PHP)
Training target. This page is intentionally vulnerable.
Keep this deployment private - see README.
Order 1003
| Order | 1003 |
| User | 2 |
| Total | $329.00 |
| Status | paid |
| Recipient | Alice |
| Phone | 13800000002 |
| Address | 2 Lab Road, Test City |
| Card |
4222222222222220 |
| Placed | 2026-09-28 03:13:42 |
Items
| Item | Price | Qty |
| 27" 4K Monitor |
$329.00 |
1 |
LAB