Step 6 of 6, show all steps
0 of 6 done
Explain what you found
The shop's own page put the delivery fee into your order, in a box you couldn't see. Then the shop believed whatever fee came back. But you were the one who packed the envelope.
The developers did think about part of this. If you tried -100, you saw it: the total can't go below $0, so nobody gets paid to eat pizza. They just never checked the fee itself, so a smaller minus number still takes money off.
The fix is for the shop to work out the delivery fee on its own and ignore any fee the browser sends. That's what the patched shop does.
Finding a bug is half the job. The other half is explaining it so the people who run the website can fix it. Finish this sentence the way you'd say it to a friend.
See how we'd say it
...was the one its own page put there. But I could change it before it was sent. The shop should work out the fee itself.
In the course, you write up each bug like this, and your instructor reads it and gives you feedback. Every student also signs the ethics agreement, which covers where you're allowed to test.
Ready for more than one bug?
How To Be Good is a live, eight-week course for beginners. You investigate simulated websites, write up what you find, and get feedback from your instructor.
Applications for the winter term close Dec 18