Add Tema 6 - SQL Injection

2024-02-12 22:18:28 +01:00
parent 514c8ead00
commit db98611323
5 changed files with 399 additions and 0 deletions
--- a/Introduccion-hacking-hack4u/tema_6_owasp/01_sqli/searchUsers.php
+++ b/Introduccion-hacking-hack4u/tema_6_owasp/01_sqli/searchUsers.php
@@ -0,0 +1,19 @@
+<?php
+
+  $server = "localhost";
+  $username = "s4vitar";
+  $password = "s4vitar123";
+  $database = "Hack4u";
+
+  // Establecer conexión
+  $conn = new mysqli($server, $username, $password, $database) or die(mysqli_error($conn));
+
+  $id = $_GET['id'];
+
+  $data = mysqli_query($conn, "select username from users where id = '$id'");
+
+  $response = mysqli_fetch_array($data);
+
+  echo $response['username'];
+
+?>