Lab: Flawed enforcement of business rules
This lab has a logic flaw in its purchasing workflow. To solve the lab, exploit this flaw to buy a "Lightweight l33t leather jacket".
You can access your own account using the following credentials:
Log in and notice that there is a coupon code,
At the bottom of the page, sign up to the newsletter. You receive another coupon code,
- Add the leather jacket to your cart.
- Go to the checkout and apply both of the coupon codes to get a discount on your order.
- Try applying the codes more than once. Notice that if you enter the same code twice in a row, it is rejected because the coupon has already been applied. However, if you alternate between the two codes, you can bypass this control.
- Reuse the two codes enough times to reduce your order total to less than your remaining store credit. Complete the order to solve the lab.