* Sunda Cyber Army 2k17 *
Indonesia Defacer ~

© | FaceBook | Youtube | ©
?? | HackersId | DefacerId | ??
?? | Website | ??
?? | Tools | ??

Path : /proc/self/cwd/

File Upload :

Current File : //proc/self/cwd/results.php

Results:<hr>
<?php


$host = "webdev.iyaclasses.com";
$userid = "<youruserid>";
$userpw = "<yourpw>";
$db = "dent_dvd";

include '../pdloginvariables.php'; // you can ignore/skip this line

$mysql = new mysqli(
    $host,
    $userid,
    $userpw,
    $db
);

if($mysql->connect_errno) {
    echo "db connection error : " . $mysql->connect_error;
    exit();
} else {
    echo "db connection successful";
}

$sql = "   SELECT * from movieView";
$sql = $sql . "
            WHERE 1=1 ";

if($_REQUEST['rating'] != "ALL" ) {
    $sql .= " AND rating ='" . $_REQUEST["rating"] . "'";
}

if($_REQUEST["genre"] != "ALL") {
     $sql = $sql . " AND genre = '" . $_REQUEST["genre"] ."'";
}
$sql .=
            " ORDER BY title ";

echo "<hr>" . $sql . "<hr>";

$results = $mysql->query($sql);

if(!$results) {
    echo "SQL error: ". $mysql->error;
    exit();
} else {
    echo "Your search returned " . $results->num_rows . " results.<hr>";
}

while($currentrow = $results->fetch_assoc()) {
    echo "<strong>" .
        $currentrow["title"] .
        "</strong> (" .
        $currentrow["genre"] .
        " <em>Rated " .
        $currentrow["rating"] .
        "</em>)<br>";
}