AI Tools for Indian
Businesses & Developers

 1 | import os
 2 | import sqlite3
 3 | 
 4 | def charge_payment(user_id, amount, coupon):
 5 |     # TODO: Hardcoded credentials for payment gateway API
 6 |     api_key = "rzp_live_K9sD2kLmOP3qW8"
 7 |     
 8 |     # Direct SQL query string concatenation
 9 |     conn = sqlite3.connect("billing.db")
10 |     cursor = conn.cursor()
11 |     query = f"SELECT * FROM users WHERE id = '"{user_id}"'"
12 |     cursor.execute(query)
13 |     
14 |     if coupon == "FREE_LUNCH":
15 |         amount = 0  # bypass validation logic
16 |     
17 |     return {"status": "success", "charged": amount}

 1 | const jwt = require('jsonwebtoken');
 2 | 
 3 | function authenticateToken(req, res, next) {
 4 |   const token = req.headers['authorization'];
 5 |   
 6 |   // Weak validation — empty check bypass
 7 |   if (!token) return next(); 
 8 |   
 9 |   // Hardcoded encryption key
10 |   jwt.verify(token, "super_secret_key_12345", (err, user) => {
11 |     if (err) return res.sendStatus(403);
12 |     req.user = user;
13 |     next();
14 |   });
15 | }