LeakedIn Logo
Stories About Data Leaks and Related Stuff

Potential leak of data: MySQL Connect Information

0 votedvote

Detected 2 occurrence(s) of ‘mysql_[p]*connect\([^\$]‘:

     HttpResponse response = httpclient.execute(httppost);
        HttpEntity entity = response.getEntity();
        InputStream is = entity.getContent();
}catch(Exception e){
        Log.e("log_tag", "Error in http connection "+e.toString());
}
	
<?php
mysql_connect("host","username","password");
mysql_select_db("Cars");

$q=mysql_query("SELECT * FROM car WHERE model_year>'".$_REQUEST['year']."'
 and color="'".$_REQUEST['color']."'");
while($e=mysql_fetch_assoc($q))
        $output[]=$e;

print(json_encode($output));

Source: http://pastebin.com/raw.php?i=9GPtd0e2

Tags: ,

Comments are closed.