* Sunda Cyber Army 2k17 *
Indonesia Defacer ~

© | FaceBook | Youtube | ©
?? | HackersId | DefacerId | ??
?? | Website | ??
?? | Tools | ??

Path : /proc/self/cwd/

File Upload :

Current File : //proc/self/cwd/insertmovie.php

Insert movie (receive new movie form data)
<hr>
<?php
if ( $_REQUEST["title"] == "") {
    echo "Please go through the <a href='insertform.php'>insert movie form page</a>";
    exit();
};

echo "<br><br>";

print_r($_REQUEST);

$host = "webdev.iyaclasses.com";
$userid = "[youruserid]";
$userpw = "[yourpw]";
$db = "[database name]";

include '../pdloginvariables.php';

$mysql = new mysqli(
    $host,
    $userid,
    $userpw,
    $db
);

if($mysql->connect_errno) {
    echo "db connection error : " . $mysql->connect_error;
    exit();
}

$favcolor = 'color';
$favcolor = "color";

$sql = "  INSERT   INTO     dvd_titles " .
    "    (title, release_date , award , label_id , sound_id, genre_id, rating_id, format_id)" .
    "    VALUES " .
    "( 		" .
    "'" . $_REQUEST["title"] ."'," .
    "'" . $_REQUEST["release_date"] . "'," .
    "'" . $_REQUEST["award"] . "'," .
    $_REQUEST["label"] . ",".
    $_REQUEST["sound"] . ",".
    $_REQUEST["genre"] . ",".
    $_REQUEST["rating"] . ",".
    $_REQUEST["format"] .
    ")";

echo "<hr> ". $sql . "<hr>";

$results = $mysql->query($sql);
if(!$results) {
    echo "ERROR: " . $mysql->error;
    exit();
} else {
    echo "Successfully added new film title ". $_REQUEST["title"];
    echo "The new record ID is " . $mysql -> insert_id;
}
?>


html of the page.