LeakedIn Logo
Stories About Data Leaks and Related Stuff

Potential leak of data: MySQL Connect Information

0 votedvote

Detected 1 occurrence(s) of ‘mysql_[p]*connect\(["']{0,1}[a-z0-9\-\.]+["']{0,1}\s*,’:

<input type="checkbox" name="features[]" value="Items" >Items<br />
<input type="checkbox" name="features[]" value="GUI" >Gui<br />
</form
	
<?php

    $button = $_POST['submit'];
    $features = $_POST['features'];

    if ($button){

    //connect
    mysql_connect("server","username","password");
    mysql_select_db("rdm");

    foreach ($features){

    $x++;

    if ($x=1)
    $construct .= "feature LIKE '$features[$x]'";
    else
    $construct .= " OR feature LIKE '$features[$x]'";
    }

    $construct = "SELECT * FROM 

Source: http://pastebin.com/raw.php?i=BHdq1nrN

Tags: ,

Comments are closed.