Project goals :

1.Demonstrate simple, intentional vulnerabilities (SQLi and XSS) in a tiny web app.

2.Show attacker payloads (for learning) and how they work.

3.Show secure fixes: parameterized queries, proper output encoding, input validation, least privilege, and content security measures.