Lab 2: Document Access Control

// Vulnerable: No authorization check
$doc_id = $_GET['doc_id'] ?? '1';

// Simulate document database
$documents = [
    1 => ['id' => 1, 'title' => 'Project Alpha', 'owner_id' => 1, ...],
    2 => ['id' => 2, 'title' => 'Financial Report', 'owner_id' => 2, 'confidential' => true, ...],
    3 => ['id' => 3, 'title' => 'Company Strategy', 'owner_id' => 3, 'confidential' => true, ...]
];

// Direct access without checking if user is authorized
if (isset($documents[$doc_id])) {
    $document_data = $documents[$doc_id];
    // Display document data
}

// Example vulnerable usage:
// ?doc_id=1 (own document - allowed)
// ?doc_id=2 (other user's confidential document - unauthorized access)
// ?doc_id=3 (admin's confidential document - unauthorized access)