This is a walkthrough for my 9th Secure Code Review challenge (BAC - IDOR). You can find the challenge here: github.com/dub-flow/secure-code-review-challenges/tree/main/challenge-09.
In this video, I will show how to identify an IDOR in the source code, how to exploit it, and how to secure the code.