Files
archived-presentations/slides/debugging/user_input.php

8 lines
223 B
PHP

// hack me please
include "template/" . $_GET['page'] . ".php";
// apperances can be decieving, "32312\0Yay, H4x0r3d!"
if (intval($_GET['id'])) {
$result = mysql_query("SELECT * FROM foo WHERE bar=".$_GET['id']);
}