cookie poisoning

cookie poisoning

cookie-poison.php

cookie-poison-server.php


$qty=$_POST['qty'];
$disc1=$_COOKIE['disc1'];
$disc2=$_COOKIE['disc2'];
$price=1000;
if($qty==1){
$fprice=($price*$qty)-$disc1;
echo "OK";
echo "Final price is ".$fprice;
}else{
$fprice=($price*$qty)-$disc2;
echo "Final price is ".$fprice;
echo "Bye";
}


?>