sql-injection-hack-workshop/index.php at master · philip-hub/sql-injection-hack-workshop · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
<?php
include 'connect.php';

//Make a SQL Connection
$conn = new mysqli($servername, $username, $password, $dbname);
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

// Make a SQL query
$username=$_POST["username"];
$password = $_POST["password"];
$sql = 'SELECT * FROM userinfo WHERE username ="'.$username.'" AND password ="'.$password.'";';
// echo $sql;
$result = mysqli_query($conn, $sql);

if ($result->num_rows > 0) {
    // output data of each row
    echo "<br><h1>Here is your personal info we do not share it with anyone</h1><br>
    <center><a href ='index.html'>Return to Sign In</a></center><br>";
    $bank_info ="";
    $row_check =array();
    while($row = $result->fetch_assoc()) {

        if (!in_array($row["username"], $row_check)){
        $bank_info = "<div id='bankinfo'><br><p id='name'>Username: ". $row["username"]. " </p><br><p id='password'> Password: ". $row["password"]. "  </p><br><p id='money'> Balance: $" . $row["amount"] . "</p><br></div><br>".$bank_info;
        array_push($row_check, $row["username"]);
        }
        else{
            echo "<br>";
        }
    }
} else {
    $bank_info = "    <style>
    body{
width: 100%;
height: -webkit-fill-available;
min-height: 100%;
background-image: url('https://i.giphy.com/media/9SJ0zZnGVQSajeSMZ2/giphy.webp');
background-size: cover;
background-position-x: center;
color: #f0f0f0;
font-family: 'Fira Sans', sans-serif;
box-shadow: 0 20000px rgba(15, 15, 15, .96)  inset;

}
    </style><br><p>Sorry This Account does not exsist<br><a href ='index.html'>Return to Sign In</a></p>";
}


?>
<!DOCTYPE html>
<html>
<head>
<link href="style.css" rel="stylesheet" type="text/css" />
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">
    <title>
    *Your* Secure Info
    </title>
</head>
<body>

<?php


echo $bank_info;

?>
<br>
<br>
<br>
<center>
<a href="https://www.instagram.com/memphishackclub/" target="_blank" class="fa fa-instagram"></a>
<a href="https://twitter.com/MHackclub" target="_blank" class="fa fa-twitter"></a>
<a href="https://www.facebook.com/groups/656997425191729" target="_blank" class="fa fa-facebook"></a>
 <a href="https://www.linkedin.com/company/memphis-hack-club/?viewAsMember=true" class="fa fa-linkedin" target="_blank"></a>
 <a href="https://www.youtube.com/channel/UCQEw733Z4ID3AVLtFpQ5hyw" class="fa fa-youtube" target="_blank"></a>
 <br>
 </center>
</body>
</html>