Lab Templates/Lab Template - WAF for GCP Coffeeshop/sql-injection-demo/lib/delete_item.php (11 lines of code) (raw):
<?php
require_once('connectdb.php');
if (isset($_POST['id'])) {
$id = $_POST['id'];
// vulnerable...
$query = "DELETE FROM coffee WHERE id=$id";
$db = connectdb();
mysqli_multi_query($db, $query);
mysqli_close($db);
}
header('Location: ../index.php');
?>