Reported Post by Swaps

Swaps · Jan 25, 2016

Swaps has reported a post.

Reason:

Has nothing to do with swapping.

I don't even know what this is or why this user posted it under this section of the forums
Click to expand...

Post: hahahahahha
Forum: Gold Swapping Services
Assigned Moderators: Blupig, Brendan, Travis, Blade, Apith, Time To Buy, SellerMan, Zuzel111, Cas_M, Dunworry

Posted by: mrs thirdage
Original Content:
Code:
[PHP]<?php

    include_once "dosql.php";
#
#   Put your own database information here.  I'm using my log file's data.
#
    $hostname = "myhost";
    $username = "myUser";
    $password = "myPassword";
    $database = "myDatabase";

    $mysqli = new mysqli($hostname, $username, $password, $database);

    if ($mysqli->connect_errno) {
        echo "Failed to connect to MySQL: (", $mysqli->connect_errno, ") ", $mysqli->connect_error;
        exit;
    }
    echo "SQL INJECTION - Plain\n";
    $sql = "SELECT * FROM log WHERE log_id='2' OR 1=1; #'";
    $res = dosql($sql);
    foreach ($res[0] as $k => $v) {
        echo "RES[$k] = $v\n";
    }

    echo "\n\nSQL INJECTION = Hexadecimal\n";
    $sql = "SELECT * FROM log WHERE log_id=unhex('" . bin2hex("2' or 1=1; #'") . "')";
    $res = dosql($sql);
    foreach ($res[0] as $k => $v) {
        echo "RES[$k] = $v\n";
    }

    exit;
?>[/PHP]
Click to expand...