<?php
include "sql_and_php_debug_with_anticheat.php";
mysql_connect("localhost", "error1", "error1");
mysql_select_db("error1");
?>
<h1>Gondex</h1>
<?php
if (isset($_GET['query'])) {
$query = $_GET['query'];
if (preg_match('/sleep|benchmark|\//i', $query)) {
?>
<h2>You look like a hacker</h2>
<p>Please don't even try to hack our systems!!!!!!!</p>
<?php
} else {
mysql_query("SELECT " . $query);
if ($err = mysql_error()) {
?>
<h2>Oh, everything got wrong</h2>
<p>Please don't send this string to my e-mail. I won't fix it.</p>
<pre><?php echo $err; ?></pre>
<p><a href="?">Make another query</a></p>
<?php
} else {
?>
<h2>Something found... (or not)</h2>
<p>Page with your results is in development. Come back later!</p>
<p><a href="?">Make another query</a></p>
<?php
}
}
} else {
?>
<p>Flag is in column <code>flag</code> of table <code>flag</code>.</p>
<p>Try our ultimate search utility (beta version).</p>
<form action="" method="get" id="form">
<p>Select <input type="text" name="query" id="query" placeholder="everything you want" /><button>GO</button></p>
<input type="hidden" name="sig_query" id="sig_query" />
</form>
<?php
}
?>
Flag is in column flag
of table flag
.
Try our ultimate search utility (beta version).