gnh1201/Vulnerable-Web-Application
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create sql6.php

Browse Source
This commit is contained in:
Fatih Çelik 2018-11-30 02:55:37 +06:00 committed by GitHub
parent 4b8ee90637
commit 47d004e519
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 43 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
SQL/sql6.php Normal file
View File

@ -0,0 +1,43 @@
<!DOCTYPE html>
<html>
<head>
<title>SQL Injection</title>
</head>
<body>
<form action="<?php $_SERVER['PHP_SELF']; ?>" method="get" >
<p>Give me book's number and I give you...</p>
Book's number : <input type="text" name="number">
<input type="submit" name="submit">
</form>
<!--Admin password is in the secret table. I hope, anyone doesn't see it.-->
<?php
$servername = "localhost";
$username = "root";
$password = "";
$db = "1ccb8097d0e9ce9f154608be60224c7c";
// Create connection
$conn = new mysqli($servername, $username, $password,$db);
// Check connection
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
//echo "Connected successfully";
$source = "";
if(isset($_GET["submit"])){
$number = $_GET['number'];
$query = "SELECT bookname,authorname FROM books WHERE number = '$number'";
$result = mysqli_query($conn,$query);
$row = @mysqli_num_rows($result);
echo "<hr>";
if($row > 0){
echo "<pre>There is a book with this index.</pre>";
}else{
echo "Not found!";
}
}
?>
</body>
</html>