PHP App Recon: Routes, State and Evidence Limits
Review a PHP-style application by recording routes, inputs, account context and state transitions. Use the task record to separate implementation hints from demonstrated authentication, authorization or injection behavior.