<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Dead or alive 2</title>
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css"
integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
<style>
.btn{
margin-left: 10px;
}
</style>
</head>
<body>
<?php
include "sql_and_php_debug_with_anticheat.php";
mysql_connect("localhost", "bypass2", "bypass2");
mysql_select_db("bypass2");
?>
<div style="width: 65%; padding: 2rem; box-sizing: border-box;">
<h2>Find out how many years you have left to live</h2>
<p>There is <code>flags</code> table with columns <code>id</code>, <code>name</code> and <code>flag</code>.
Real flag has name <code>7e6d83ade8bcbea8</code>.</p>
<form action="" method="get" id="form">
<label for="limit">Age</label>
<div class="form-group">
<input type="text" name="age" id="age" class="form-control" required>
<input type="hidden" name="sig_age" id="sig_age" />
</div>
<button type="submit" class="btn btn-primary">Get</button>
</form>
<?php
$age = "";
if (isset($_GET['age'])) {
$age = addslashes($_GET['age']);
$result = debug_mysql_query("SELECT * FROM age WHERE age=$age");
?>
<div class="card" style="margin-top: 20px; margin-bottom: 20px;">
<div class="card-body">
<h2 class="pull-left">Data</h2>
</div>
</div>
<?php
if ($result && mysql_num_rows($result) > 0) {
echo "<table class='table table-bordered table-striped'>";
echo "<thead>";
echo "<tr>";
echo "<th>Current age</th>";
echo "<th>Years left</th>";
echo "</tr>";
echo "</thead>";
echo "<tbody>";
while ($row = mysql_fetch_assoc($result)) {
echo "<tr>";
echo "<td>" . $row['age'] . "</td>";
echo "<td>" . $row['death'] . "</td>";
echo "</tr>";
}
echo "</tbody>";
echo "</table>";
} else {
echo "<p class='lead'><em>No records were found.</em></p>";
}
}
?>
</div>
</body>
</html>
There is flags table with columns id, name and flag.
Real flag has name 7e6d83ade8bcbea8.