gnh1201/Vulnerable-Web-Application
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create sql4.php

Browse Source
This commit is contained in:
Fatih Çelik 2018-11-28 02:50:59 +06:00 committed by GitHub
parent f01990f4bd
commit 557692ce42
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 65 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

65
SQL/sql4.php Normal file
View File

@ -0,0 +1,65 @@
<!DOCTYPE html>
<html>
<head>
<title>SQL Injection</title>
</head>
<body>
<form action="<?php $_SERVER['PHP_SELF']; ?>" method="post" >
<p>Give me book's number and I give you book's name in my library.</p>
Book's number : <input type="text" name="number">
<input type="submit" name="submit">
<!--<p>Im learning something, I think?
I will sanitize query this time!!
//I'm the best web developer.
//number is too dangerous. I have to do something.</p>
-->
</form>
<?php
$servername = "localhost";
$username = "root";
$password = "";
$db = "db1";
// Create connection
$conn = new mysqli($servername, $username, $password,$db);
// Check connection
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
//echo "Connected successfully";
if(isset($_POST["submit"])){
$number = $_POST['number'];
//I'm the best web developer.
//number is too dangerous. I have to do something.
if(strchr($number,"'")){
echo "What are you trying to do?<br>";
echo "Awesome hacking skillzz<br>";
echo "But you can't hack me anymore!";
exit;
}
$query = "SELECT bookname,authorname FROM books WHERE number = $number";
$result = mysqli_query($conn,$query);
if (!$result) { //Check result
$message = 'Invalid query: ' . mysql_error() . "\n";
$message .= 'Whole query: ' . $query;
die($message);
}
while ($row = mysqli_fetch_assoc($result)) {
echo "<hr>";
echo $row['bookname']." ----> ".$row['authorname'];
}
if(mysqli_num_rows($result) <= 0)
echo "0 result";
}
?>
</body>
</html>