Add Tema 6 - SQL Injection

2024-02-12 22:18:28 +01:00
parent 514c8ead00
commit db98611323
5 changed files with 399 additions and 0 deletions
--- a/Introduccion-hacking-hack4u/tema_6_owasp/01_sqli/searchUsers2.php
+++ b/Introduccion-hacking-hack4u/tema_6_owasp/01_sqli/searchUsers2.php
@@ -0,0 +1,21 @@
+<?php
+
+  $server = "localhost";
+  $username = "s4vitar";
+  $password = "s4vitar123";
+  $database = "Hack4u";
+
+  // Establecer conexión
+  $conn = new mysqli($server, $username, $password, $database);
+
+  $id = mysqli_real_escape_string($conn, $_GET['id']);
+
+  $data = mysqli_query($conn, "select username from users where id = $id");
+
+  $response = mysqli_fetch_array($data);
+
+  if(!isset($response['username'])){
+    http_response_code(404);
+  }
+
+?>