Uploaded first base page

2026-03-03 08:29:48 +00:00
parent bfb548bc4b
commit 0e29dfdb8a
1 changed files with 46 additions and 0 deletions
--- a/index.php
+++ b/index.php
@@ -0,0 +1,46 @@
 <?php
 $host = "localhost";
 $db = "injection";
 $username = "root";
 $password = "root";
 $conn = mysqli_connect($host, $username, $password, $db);
 if (!$conn) {
    die("Connessione fallita: " . mysqli_connect_error());
 }
 if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // INPUT NON SANIFICATO (VULNERABILE)
    $username = $_POST['username'];
    $password = $_POST['password'];
    // Query vulnerabile a SQL Injection
    $sql = "SELECT * FROM users WHERE Username = '$username' AND Password = '$password'";
    $result = mysqli_query($conn, $sql);
    if ($result && $result->num_rows > 0) {
        echo "Login effettuato con successo!";
    } else {
        echo "Credenziali non valide.";
    }
 }
 ?>
 <!DOCTYPE html>
 <html>
 <head>
    <title>SQL Injection Test</title>
 </head>
 <body>
 	<h2>Login Test (Vulnerabile)</h2>
 	<form method="POST" action="">
 		Username: <input type="text" name="username"><br><br>
 		Password: <input type="password" name="password"><br><br>
 		<input type="submit" value="Login">
 	</form>
 </body>
 </html>