feat: Add base files

backend/index.js

@@ -0,0 +1,27 @@
+const express = require('express');
+const mysql = require('mysql2');
+const cors = require('cors');
+const app = express();
+
+const db = require('./db');
+
+app.use(cors());
+app.use(express.json());
+
+app.post('/api/login', (req, res) => {
+  const { username, password } = req.body;
+
+  // 🚨 INTENTIONALLY VULNERABLE TO SQLi
+  const query = `SELECT * FROM users WHERE username = '${username}' AND password = '${password}'`;
+
+  db.query(query, (err, results) => {
+    if (err) return res.status(500).send('Error');
+    if (results.length > 0) {
+      res.send('Login successful');
+    } else {
+      res.status(401).send('Invalid credentials');
+    }
+  });
+});
+
+app.listen(5000, () => console.log('Backend running on port 5000'));