For example, you can directly place an order to purchase a product for a website of 0 RMB.

For example, you can directly place an order to purchase a product for a website of 0 RMB.

LAX Verification

Http://youxuan.homeinns.com/this domain name through the mobile phone access, and then choose the product, order, packet capture to change the amount of 0 months or negative can be placed directly successfully.

 

When you submit the package, capture the package and modify the totleMoney parameter. After testing, we found that the order can be directly placed if it is changed to 0 RMB or a negative number (equivalent to already paid ).
 

The following information is displayed on my mobile phone and my user center. Waiting for home delivery ......
 

 

 

Solution:

Verification