From bf3c141f3c318b45b1f43d962623587ac26a92a2 Mon Sep 17 00:00:00 2001
From: Marcin Zelent <zelent.marcin@gmail.com>
Date: Wed, 30 May 2018 16:53:50 +0200
Subject: Added SQL injection example

---
 sql-injection/login.php | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 sql-injection/login.php

(limited to 'sql-injection/login.php')

diff --git a/sql-injection/login.php b/sql-injection/login.php
new file mode 100644
index 0000000..826c38c
--- /dev/null
+++ b/sql-injection/login.php
@@ -0,0 +1,23 @@
+<?php
+   class MyDB extends SQLite3 {
+      function __construct() {
+         $this->open('users.db');
+      }
+   }
+
+   if(isset($_POST['email'], $_POST['pass']))
+   {
+	$email = $_POST['email'];
+	$pass = $_POST['pass'];
+
+	$db = new MyDB();
+
+	$sql = 'SELECT * FROM Users WHERE email=\''.$email.'\' AND password=\''.$pass.'\'';
+
+	$ret = $db->query($sql);
+	while($row = $ret->fetchArray(SQLITE3_ASSOC)) {
+		echo 'Logged in as '.$row['email'].'<br>';
+	}
+	$db->close();
+   }
+?>
-- 
cgit v1.2.3