SELECT * FROM products WHERE id = 1' OR '1'='1'

echo "Total Cost: " . calculate_total_cost();

SELECT * FROM products WHERE id = '1' OR '1'='1'

Implement parameterized tests that attempt IDOR attacks on every endpoint: