Project goals :
1.Demonstrate simple, intentional vulnerabilities (SQLi and XSS) in a tiny web app.
2.Show attacker payloads (for learning) and how they work.
3.Show secure fixes: parameterized queries, proper output encoding, input validation, least privilege, and content security measures.