* Sunda Cyber Army 2k17 *
Indonesia Defacer ~

© | FaceBook | Youtube | ©
?? | HackersId | DefacerId | ??
?? | Website | ??
?? | Tools | ??

Path : /home/dent/public_html/demoimages/

File Upload :

Current File : /home/dent/public_html/demoimages/edit_files.txt

<?php
if(empty($_REQUEST['id'])) {
    echo "You reached this page in error.";
    exit();
}

$host = "webdev.iyaclasses.com";
$user = "dent";
$userpw = "";
$db="dent_dvdimages";

// include "../pdloginvariables.php";

$db="dent_dvdimages";

$mysql = new mysqli(
    $host,
    $userid,
    $userpw,
    $db
);

if($mysql->connect_errno) {
    echo "db connection error : " . $mysql->connect_error;
    exit();
}

$recordsql = "  SELECT * FROM movieView2 " .
    " WHERE dvd_title_id=" . $_REQUEST['id'];

$genresql = ' SELECT * from genres';

$recordresults = $mysql->query($recordsql);
$recordinfo = $recordresults->fetch_assoc();

$genreresults = $mysql->query($genresql);

echo "Editing movie " . $recordinfo['title'];
?>

<form action="update_files.php" method="get">
Title: <input type="text" name="title"
       value="<?php echo $recordinfo['title']; ?>"/><br>
ImageURL: <input type="text" name="imageurl" style="width: 500px"
           value="<?php echo $recordinfo['imageurl']; ?>"/><br>

Genre:    <select name="genre">
<?php
echo "<option selected='1' value='".
    $recordinfo['genre_id'] . "'>" .
    $recordinfo['genre'] . "</option>";

while ($currentrow = $genreresults->fetch_assoc()){
    echo "<option " .
    " value='" . $currentrow['genre_id'] . "'>" .
        $currentrow['genre'] . "</option>";
}
?></select><br>
<input type="hidden"  name="id"
   value="<?php echo $recordinfo['dvd_title_id'];?>">

<input type="submit">
</form>