SQL: SELECT q, created_at FROM search_history ORDER BY id DESC LIMIT 8
DRIVER: PDO sqlite3 / PHP 8.5.11
Search - OWASP Shop Lab (PHP)
OWASP Shop Lab (PHP) mode: vuln switch login
Training target. This page is intentionally vulnerable. Keep this deployment private - see README.

LAB hint panel - search

  • A03-02 UNION injection in q
    ?q=zzz' UNION SELECT id,username,password,role,email FROM users --
  • A03-08 Error-based injection
    ?q='
  • A03-14 Reflected XSS in q
    ?q=<script>alert(1)</script>

Search

Recent searches

none
LAB