). This can point toward administrative interfaces or software update services that might be misconfigured. Security Research Context

Request:

Before performing an update (upd), verify that the logged-in user has permission to modify the specific record associated with that id . Just because a user can access id=1 doesn't mean they should be allowed to edit it.

on SQL injection via id parameters in PHP apps: