This is a vulnerable PHP web application for SCR. It is not a complete web app but rather consists of independent modules like login, register, and cart. Feel free to add your own modules or create a pull request. We are working on best-practice modules so you can break them and learn how to fix them in one place.