Sign in to RatShop. The login query is built by string concatenation, the error messages distinguish valid from invalid usernames, and the post-login ?next= redirect is not host-checked. Demo user: you / hunter2.
?next=
you / hunter2