first commit

dvwa/vulnerabilities/sqli/source/high.php

@@ -0,0 +1,29 @@
+<?php
+
+if( isset( $_SESSION [ 'id' ] ) ) {
+	// Get input
+	$id = $_SESSION[ 'id' ];
+
+	// Check database
+	$query  = "SELECT first_name, last_name FROM users WHERE user_id = '$id' LIMIT 1;";
+	$result = mysql_query( $query ) or die( '<pre>Something went wrong.</pre>' );
+
+	// Get results
+	$num = mysql_numrows( $result );
+	$i   = 0;
+	while( $i < $num ) {
+		// Get values
+		$first = mysql_result( $result, $i, "first_name" );
+		$last  = mysql_result( $result, $i, "last_name" );
+
+		// Feedback for end user
+		$html .= "<pre>ID: {$id}<br />First name: {$first}<br />Surname: {$last}</pre>";
+
+		// Increase loop count
+		$i++;
+	}
+
+	mysql_close();
+}
+
+?>