Added S-41

Author: harsh-bothra

README.md

@@ -59,6 +59,7 @@ S.No. | Topic
 **38** | [Vulnerable Code Snippet - 25](/resources/vulnerable-code-25.md)
 **39** | [Vulnerable Code Snippet - 26](/resources/vulnerable-code-26.md)
 **40** | [Vulnerable Code Snippet - 27](/resources/vulnerable-code-27.md)
+**41** | [Vulnerable Code Snippet - 28](/resources/vulnerable-code-28.md)
 
 
 # SecurityExplained NewsLetter

media/code-28.jpg

@@ -0,0 +1,18 @@
+### SecurityExplained S-41: Vulnerable Code Snippet - 28
+
+#### Vulnerable Code: 
+
+![Vulnerable Code](../media/code-28.jpg)
+
+
+#### Solution: 
+
+
+@Brumens2 explained that this code is vulnerable to Insecure Direct Object Reference. The issue is that the if statement do check with "==" and not "&&" on line-17. This means if irrespective of "true" or "false" condition, it will grant the permission.
+
+
+
+Twitter Thread: https://twitter.com/harshbothra_/status/1491644512204394498
+
+##### Code Credits: @Brumens2
+