* Sunda Cyber Army 2k17 *
Indonesia Defacer ~

© | FaceBook | Youtube | ©
?? | HackersId | DefacerId | ??
?? | Website | ??
?? | Tools | ??

Path : /home/dent/public_html/demo4a/

File Upload :

Current File : /home/dent/public_html/demo4a/results_final.txt

<?php
$host = "webdev.iyaserver.com";
$userid = "[youruserid]";
$userpw = "[yourpw]";
$db = "[database name]";

// include '../pdloginvariables.php';

$mysql = new mysqli(
    $host,
    $userid,
    $userpw,
    $db
);

if($mysql->connect_errno) {
echo "db connection error : " . $mysql->connect_error;
exit();
}

$sql = 		"SELECT * FROM movieView WHERE 1=1 " .
    " AND title LIKE '%" . $_REQUEST['title'] . "%'";

if($_REQUEST['rating'] != "ALL" ) {
    $sql .= " AND rating ='" . $_REQUEST["rating"] . "'";
}

if($_REQUEST['genre'] != "ALL" ) {
    $sql .=		" AND genre = '" . $_REQUEST["genre"] . "'";
}

$sql .=		" ORDER BY " . $_REQUEST['sortorder'];


$results = $mysql->query($sql);

// echo "<hr>SQL:" . $sql . "<hr>";

if(!$results) {
echo "SQL error: ". $mysql->error;
exit();
}


echo "Your results returned " .
    $results->num_rows .
    " results.<hr>";


while($currentrow = $results->fetch_assoc()) {
    echo "<strong>" .
        $currentrow['title'] .
        "</strong> <em>(Rated " .
        $currentrow["rating"] .
        "), ".
        $currentrow["genre"] .
        "</em><br>";
}