WackoPicko/Logic-Flaw  

From Aldeid
Jump to: navigation, search
You are here:
Logic Flaw

Contents

Description

The coupon system suffers from a logic flaw, as a coupon can be applied multiple times to the same order reducing the final price of an order to zero. The coupon in the initial data is SUPERYOU21.

Proof of Concept

Wackopicko-logic-flaw.png Wackopicko-logic-flaw-2.png

How to detect?

  • Unit tests (automatized?)

How to protect against it?

  • Unit tests (automatized?)

Comments

Share this article  •  Tweet it!  •  Email this  •  Digg it  •  Share on Facebook

Talk:WackoPicko/Logic-Flaw

Personal tools
Namespaces

Variants
Actions
Security
Menu
Misc
Toolbox