Unauthenticated database access via unsanitized user_id query

SQL injection in SourceCodester Client Database Management System 1.0 allows remote attackers to access database data through user_id. The user_customer_create_order.php endpoint inserts the attacker-controlled user_id value directly into an SQL query without sanitization or validation. No login is required, and the demonstrated error-based payload discloses the active database name while query manipulation also permits unauthorized database operations.