simple webapp store that is vulnerable to attacks