13 lines
203 B
PHP
13 lines
203 B
PHP
cat > vulnerable-test.php <<'PHP'
|
|
<?php
|
|
|
|
$id = $_GET['id'];
|
|
|
|
$db = new PDO('sqlite:test.db');
|
|
|
|
$query = "SELECT * FROM users WHERE id = " . $id;
|
|
$result = $db->query($query);
|
|
|
|
echo $_GET['message'];
|
|
PHP
|