Ecommerce Security Checklist: Sweepstakes, Coupon 2023
The pcntl_fork() function is a function used to create a process in the php-pcntl module. (does not support windows). As for how to install and enable the php_pcntl extension, I won’t introduce it here, only ana... Read Parallel processing in PHP using pcntl_fork() Explanation
Sweepstakes/Promotion
- random draw
- Stolen prizes/points
- Tampering with lottery points/times
- concurrent lottery
- Invitation code XSS (Verification code URL may contain user name, the user name can be changed to XSS code)
Voucher/Coupon
- Swipe vouchers/coupons in batches
- Change voucher amount/quantity
- Change Coupon Quantity
- Concurrency logic loopholes (burp obtains coupons in batches, etc.)
- Ecommerce Security Checklist: User, Membership
- Ecommerce Security Checklist: Order, Payment, Comment
- Ecommerce Security Checklist: Sweepstakes, Coupon
- Ecommerce Security Checklist: Third-Party System, Captcha
- Logical Exploits Of Captcha
- Logical Exploits Of SMS Bombing
- Logical Exploits Of Operation Beyond Authority
- Logical Exploits Of User Information Disclosure
- Logical Exploits Of Order Amount
- Logical Exploits Of Unauthorized Access
- Logical Exploits Of Unlimited Enumeration
- Logical Exploits Of Flaws In a Cookie/Token Design
- Logical Exploits Of Contract Vulnerability
- Logical Exploits Of Membership Upgrade
- Logical Exploits Of Order, Payment
- Logical Exploits Of Integer Overflow
- Logical Exploits Of Frontend Validation, Time Limit
- Logical Exploits Of Brute Force, Password Recovery
- Logical Exploits Of Arbitrary URL Jump
- Payment Logic Vulnerability of E-Commerce
Third-Party System - Unauthorized access to third-party systems- Third-party account information traversal- Unauthorized access to third-party accounts- Third-party account information leakage- Third-party application vers...
Purchase Payment/Recharge - Order information traversal/disclosure- Leakage of order information leads to leakage of user information- Unauthorized modification/deletion of other people's orders- Commodity amount/quantity ...