HackMe-SQL-Injection-Challenges/generalpage.php at master · breakthenet/HackMe-SQL-Injection-Challenges · GitHub

executable file

27 lines (26 loc) · 676 Bytes

<?php

session_start();

require "global_func.php";

if ($_SESSION['loggedin'] == 0)

{

header("Location: login.php");

exit;

}

$userid = $_SESSION['userid'];

require "header.php";

$h = new headers;

$h->startheaders();

include "mysql.php";

global $c;

$is =

mysql_query(

"SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",

$c) or die(mysql_error());

$ir = mysql_fetch_array($is);

check_level();

$fm = money_formatter($ir['money']);

$cm = money_formatter($ir['crystals'], '');

$lv = date('F j, Y, g:i a', $ir['laston']);

$h->userdata($ir, $lv, $fm, $cm);

$h->menuarea();

$h->endpage();

Expand file tree