Security Testing Demo

1. Search (Simulated SQL Injection Vulnerable)

Note: This demo simulates vulnerable behavior by naive string matching without sanitization.

2. Comments (Stored Cross-Site Scripting Vulnerable)

Note: Comments are displayed without sanitization, allowing script execution.

3. Login (Authentication Flaws Demo)

Note: No account lockout and a hardcoded weak password are used for demonstration.