* Sunda Cyber Army 2k17 *
Indonesia Defacer ~

© | FaceBook | Youtube | ©
?? | HackersId | DefacerId | ??
?? | Website | ??
?? | Tools | ??

Path : /home/dent/public_html/_demos/

File Upload :

Current File : /home/dent/public_html/_demos/results2.php

<?php
var_dump($_REQUEST);

echo "you search for " . $_REQUEST["title"];
$host = "webdev.iyaclasses.com";
$userid = "<youruserid>";
$userpw = "<yourpw>";
$db = "<database name>";

include '../pdloginvariables.php'; // you can ignore/skip this line

$mysql = new mysqli(
    $host,
    $userid,
    $userpw,
    $db
);

if($mysql->connect_errno) {
    echo "db connection error : " . $mysql->connect_error;
    exit();
}

    $sql = "SELECT * from movieView2 WHERE title LIKE '%" . $_REQUEST["title"] . "%' ";

if($_REQUEST["genre"] != "all") {
    $sql = $sql . " AND genre_id = " . $_REQUEST["genre"];
}


if($_REQUEST["release_date"] != "") {
    $sql = $sql. " AND releasedate = " . $_REQUEST["release_date"];
}
$results = $mysql -> query($sql);

if(!$results) {
    echo "SQL error: ". $mysql->error;
    exit();
}

echo "<hr>" . $sql . "<hr>";

echo "your search returned " . $results -> num_rows . " results";

$i = 0;
while($currentrow= $results -> fetch_assoc()) {
    $i = $i +1;
    echo $i . ") " . $currentrow["title"] .
        "<a href='details2.php?recordid=" . $currentrow["dvd_title_id"] . "'>View</a>".
        "<br>";
}