gnh1201/Vulnerable-Web-Application
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create sql1.php

Browse Source
This commit is contained in:
Fatih Çelik 2018-11-27 19:26:36 +06:00 committed by GitHub
parent dc8cdf0394
commit e18cf24199
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 48 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
SQL/sql1.php Normal file
View File

@ -0,0 +1,48 @@
<!DOCTYPE html>
<html>
<head>
<title>SQL Injection</title>
</head>
<body>
<form action="<?php $_SERVER['PHP_SELF']; ?>" method="post" >
<p>John -> Doe</p>
First name : <input type="text" name="firstname">
<input type="submit" name="submit">
</form>
<?php
$servername = "localhost";
$username = "root";
$password = "";
$db = "db1";
// Create connection
$conn = mysqli_connect($servername,$username,$password,$db);
// Check connection
if (!$conn) {
die("Connection failed: " . mysqli_connect_error());
}
//echo "Connected successfully";
if(isset($_POST["submit"])){
$firstname = $_POST["firstname"];
$sql = "SELECT lastname FROM users WHERE firstname='$firstname'";//String
$result = mysqli_query($conn,$sql);
if (mysqli_num_rows($result) > 0) {
// output data of each row
while($row = mysqli_fetch_assoc($result)) {
echo $row["lastname"];
echo "<br>";
}
} else {
echo "0 results";
}
}
?>
</body>
</html>