* Sunda Cyber Army 2k17 *
Indonesia Defacer ~
<?php
// var_dump($_REQUEST);
$host = "webdev.iyaclasses.com";
$userid = "<youruserid>";
$userpw = "<yourpw>";
$db = "<database name>";
include '../pdloginvariables.php'; // you can ignore/skip this line
$mysql = new mysqli(
$host,
$userid,
$userpw,
$db
);
if($mysql->connect_errno) {
echo "db connection error : " . $mysql->connect_error;
exit();
}
$sql = "SELECT * from movieView
WHERE
title like '%" . $_REQUEST["title"] . "%'";
if($_REQUEST['rating'] != "Any") {
$sql = $sql . "
AND
rating = '" . $_REQUEST["rating"] . "'";
}
echo "<br>SQL:" . $sql;
$results = $mysql->query($sql);
if(!$results) {
echo "SQL error: ". $mysql->error;
exit();
}
echo "Your search returned " . $results->num_rows . " results.<br>";
while( $currentrow = $results -> fetch_assoc() ) {
echo "<div>" . $currentrow["title"] . "</div>";
}