Webwereld

Script

Gestart doorBraam1 reacties44 weergaven
Log in om mee te praten

2 berichten · pagina 1 van 1

Braam

Lid · Topicstarter

Berichten
6.867
Reputatie
0
Punten
0,00
Lid sinds
Laatst gezien
Hallo, Saliox maakte een scriptje om gemiddeldes uitterekenen
maar via de admin pagina kun je ze op een of andere manier niet schrijven
Spoiler tonen
index.php:

[COLOR= #0000BB]<?php[/COLOR] 

[URL="http://www.php.net/ob_start"]ob_start[/URL][COLOR= #007700]();[/COLOR]

[URL="http://www.php.net/session_start"]session_start[/URL][COLOR= #007700]();[/COLOR]

[URL="http://www.php.net/error_reporting"]error_reporting[/URL] [COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$sqlhost[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"localhost"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$sqlgebruikersnaam[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"DBNAAM"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$sqlwachtwoord[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"DBPW"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$sqldatabase[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"DBDB"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$db[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_connect"]mysql_connect[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$sqlhost[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$sqlgebruikersnaam[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$sqlwachtwoord[/COLOR][COLOR= #007700])[/COLOR]

or [URL="http://www.php.net/die"]die[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$message1[/COLOR] [COLOR= #007700].[/COLOR] [URL="http://www.php.net/mysql_error"]mysql_error[/URL][COLOR= #007700]());[/COLOR]

[URL="http://www.php.net/mysql_select_db"]mysql_select_db[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"$sqldatabase"[/COLOR][COLOR= #007700]);[/COLOR]

?>

[COLOR= #0000BB]<?php
$query[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM site"[/COLOR][COLOR= #007700]);[/COLOR]
[COLOR= #0000BB]$row[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$query[/COLOR][COLOR= #007700]);[/COLOR]

[COLOR= #0000BB]$cijfers[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/array"]array[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$row[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]1[/COLOR][COLOR= #007700]],[/COLOR] [COLOR= #0000BB]$row[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]2[/COLOR][COLOR= #007700]]);[/COLOR] 
[COLOR= #0000BB]$gemiddelde[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/array_sum"]array_sum[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$cijfers[/COLOR][COLOR= #007700])[/COLOR] / [URL="http://www.php.net/count"]count[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$cijfers[/COLOR][COLOR= #007700]);[/COLOR] 
[URL="http://www.php.net/echo"]echo[/URL] [COLOR= #0000BB]$gemiddelde[/COLOR]
?>


(inlog details buiten gelaten yummie)
admin.php:

[COLOR= #0000BB]<?php[/COLOR] 

[URL="http://www.php.net/ob_start"]ob_start[/URL][COLOR= #007700]();[/COLOR]

[URL="http://www.php.net/session_start"]session_start[/URL][COLOR= #007700]();[/COLOR]

[URL="http://www.php.net/error_reporting"]error_reporting[/URL] [COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$sqlhost[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"localhost"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$sqlgebruikersnaam[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"DBNAAM"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$sqlwachtwoord[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"DBPW"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$sqldatabase[/COLOR] [COLOR= #007700]=[/COLOR] [COLOR= #DD0000]"DBDB"[/COLOR][COLOR= #007700];[/COLOR]

[COLOR= #0000BB]$db[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_connect"]mysql_connect[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$sqlhost[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$sqlgebruikersnaam[/COLOR][COLOR= #007700],[/COLOR] [COLOR= #0000BB]$sqlwachtwoord[/COLOR][COLOR= #007700])[/COLOR]

or [URL="http://www.php.net/die"]die[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$message1[/COLOR] [COLOR= #007700].[/COLOR] [URL="http://www.php.net/mysql_error"]mysql_error[/URL][COLOR= #007700]());[/COLOR]

[URL="http://www.php.net/mysql_select_db"]mysql_select_db[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"$sqldatabase"[/COLOR][COLOR= #007700]);[/COLOR]

?>
[COLOR= #0000BB]<?php

    
    $uQuery[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"SELECT * FROM site"[/COLOR][COLOR= #007700])[/COLOR] or [URL="http://www.php.net/die"]die[/URL][COLOR= #007700]([/COLOR][URL="http://www.php.net/mysql_error"]mysql_error[/URL][COLOR= #007700]());[/COLOR]
    [COLOR= #0000BB]$uFetch[/COLOR] [COLOR= #007700]=[/COLOR] [URL="http://www.php.net/mysql_fetch_assoc"]mysql_fetch_assoc[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$uQuery[/COLOR][COLOR= #007700]);[/COLOR]

    ?>
    </script>
    [COLOR= #0000BB]<?php[/COLOR]
     [URL="http://www.php.net/echo"]echo[/URL] [COLOR= #DD0000]<form action="#" method="post" enctype="multipart/form-data"">
    <table style="width: 75%;">
    <tr>
    <td>Getal 1:</strong></td>
    <td>
     <input type="text" class="1" name="1" value="[/COLOR] [COLOR= #007700].[/COLOR] [COLOR= #0000BB]$uFetch[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]1[/COLOR][COLOR= #007700]] .[/COLOR] [COLOR= #DD0000]"/></td>
    </tr>
    
    <td>Getal 2:</td>
    <td>
     <input type="text" class="2" name="2" value="[/COLOR] [COLOR= #007700].[/COLOR] [COLOR= #0000BB]$uFetch[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]2[/COLOR][COLOR= #007700]] .[/COLOR] [COLOR= #DD0000]"/></td>
         </tr></table>[/COLOR][COLOR= #007700];[/COLOR]



[URL="http://www.php.net/if"]if[/URL] [COLOR= #007700]([/COLOR][URL="http://www.php.net/isset"]isset[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]submit[/COLOR][COLOR= #007700]]))
        {[/COLOR]

[URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"UPDATE site SET 1 = "[/COLOR] [COLOR= #007700].[/COLOR] [URL="http://www.php.net/mysql_real_escape_string"]mysql_real_escape_string[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]1[/COLOR][COLOR= #007700]]) .[/COLOR] [COLOR= #DD0000]""[/COLOR][COLOR= #007700]);[/COLOR]
[URL="http://www.php.net/mysql_query"]mysql_query[/URL][COLOR= #007700]([/COLOR][COLOR= #DD0000]"UPDATE site SET 2 = "[/COLOR] [COLOR= #007700].[/COLOR] [URL="http://www.php.net/mysql_real_escape_string"]mysql_real_escape_string[/URL][COLOR= #007700]([/COLOR][COLOR= #0000BB]$_POST[/COLOR][COLOR= #007700][[/COLOR][COLOR= #DD0000]2[/COLOR][COLOR= #007700]]) .[/COLOR] [COLOR= #DD0000]""[/COLOR][COLOR= #007700]);

}[/COLOR]
[URL="http://www.php.net/echo"]echo[/URL][COLOR= #DD0000] <input type="submit" name="submit" value="Opslaan" />

     </form>[/COLOR][COLOR= #007700];[/COLOR]


?>


sql.txt:

CREATE TABLE IF NOT EXISTS `site` (
  `1` int(11) NOT NULL,
  `2` int(11) NOT NULL,
  `id` int(11) NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=MyISAM;
ik en Saliox kunnen beide de fout niet vinden..
Wat is er fout..?
0
Braam

Lid · Topicstarter

Berichten
6.867
Reputatie
0
Punten
0,00
Lid sinds
Laatst gezien
iemand oplossing?
0

Jouw reactie

Deel je idee, stel een vraag of help een ander verder.

Editor laden…

Praat mee met de One2xs-community.

Inloggen om te reageren