$ curl -s -i -c jar http://localhost:8080/customers.php | grep -E 'HTTP|Location|Set-Cookie'
HTTP/1.1 302 Found
Set-Cookie: PHPSESSID=2ab2c1d153b2beb5c142aae855e21cd4; path=/; HttpOnly; SameSite=Lax
Location: login.php

$ curl -s -b jar -c jar -d 'email=kasir1@profitina-laundry.example&password=wrong' http://localhost:8080/login.php | grep '<p>'
<p>Wrong e-mail or password.</p><form method="post">

$ curl -s -i -b jar -c jar -d 'email=kasir1@profitina-laundry.example&password=Kasir%232026' http://localhost:8080/login.php | grep -E 'HTTP|Location|Set-Cookie'
HTTP/1.1 302 Found
Set-Cookie: PHPSESSID=284b4591a4496ca4901f3c6431469018; path=/; HttpOnly; SameSite=Lax
Location: customers.php

$ curl -s -b jar 'http://localhost:8080/customers.php?q=Ayu' | grep -E 'Signed|<tr>'
<p>Signed in as Dewi Lestari Putri. <a href="logout.php">Sign out</a></p>
<tr><td>C0227</td><td>Ayu Fauzi</td><td>0816-0000-6556</td></tr>
<tr><td>C0067</td><td>Ayu Lina Santoso</td><td>0852-0000-8662</td></tr>
<tr><td>C0003</td><td>Ayu Nugroho</td><td>0812-0000-7923</td></tr>
<tr><td>C0059</td><td>Ayu Suryadi</td><td>0811-0000-8218</td></tr>
<tr><td>C0155</td><td>Bayu Lestari</td><td>0823-0000-7074</td></tr>
<tr><td>C0055</td><td>Bayu Rangga Anggraeni</td><td>0857-0000-7100</td></tr>
<tr><td>C0096</td><td>Bayu Syahputra</td><td>0813-0000-3602</td></tr>
<tr><td>C0247</td><td>Bayu Zainal Irawan</td><td>0821-0000-8632</td></tr>
<tr><td>C0231</td><td>Citra Ayu Hidayat</td><td>0898-0000-4274</td></tr>

$ curl -s -b jar 'http://localhost:8080/customers.php?q=%3Cscript%3Ealert(1)%3C/script%3E' | grep 'name="q"'
<form method="get"><input name="q" value="&lt;script&gt;alert(1)&lt;/script&gt;"> <button>Search</button></form>

$ curl -s -i -b jar -d 'name=Rina Wulandari&phone=0813-0000-4257' http://localhost:8080/customers.php | grep -E 'HTTP|Location'
HTTP/1.1 302 Found
Location: customers.php?q=0813-0000-4257

$ curl -s -b jar 'http://localhost:8080/customers.php?q=0813-0000-4257' | grep '<tr>'
<tr><td>C0257</td><td>Rina Wulandari</td><td>0813-0000-4257</td></tr>

$ curl -s -i -b jar -d 'name=&phone=12345' http://localhost:8080/customers.php | grep -E 'HTTP/|required'
HTTP/1.1 400 Bad Request
<p>A name and a phone such as 0813-0000-1234 are required.</p><table>
