* Sunda Cyber Army 2k17 *
Indonesia Defacer ~

© | FaceBook | Youtube | ©
?? | HackersId | DefacerId | ??
?? | Website | ??
?? | Tools | ??

Path : /home/dent/public_html/acad276/demo0917/

File Upload :

Current File : /home/dent/public_html/acad276/demo0917/results.php

<?php

var_dump($_REQUEST);

$host = "webdev.iyaserver.com";
$userid = "<youruserid>";
$userpw = "<yourpw>";
$db = "<database name>";

include '../../pdloginvariables.php'; // you can ignore/skip this line

$mysql = new mysqli(
    $host,
    $userid,
    $userpw,
    $db
);

if($mysql->connect_errno) {
    echo "db connection error : " . $mysql->connect_error;
    exit();
}

$sql = "SELECT * from movieView WHERE title LIKE '%" . $_REQUEST["title"] . "%'" ;
if($_REQUEST["genre"] != "ALL") {
    $sql = $sql . " AND genre = '" . $_REQUEST["genre"] . "'";
}
$sql = $sql . " AND rating = '" . $_REQUEST["rating"] . "'";

echo "<hr>". $sql . "<hr>";

$results = $mysql->query($sql);

if(!$results) {
    echo "SQL error: ". $mysql->error;
    exit();
}

echo "Your search returned " . $results->num_rows . " results.<br>";

while($currentrow =  $results->fetch_assoc()) {
    echo  $currentrow["title"] . "-" . $currentrow["genre"];
    echo "<br>";
}