Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*[“‘][a-z0-9\-_\!\$]+[“‘]': die("Connection failed: " . $conn->connect_error); } mysql_connect('localhost','st2014','progress'); mysql_select_db("st2014")or die("Cannot select DB"); $sql="SELECT * FROM 134557_users WHERE username='$username' and password='$password'"; $result=mysql_query($sql); $count=mysql_num_rows($result); if($count==1){ echo "Login successful!"; exit(); } else { echo "Wrong password or username"; } ?> Source: http://pastebin.com/raw.php?i=i3XK8BXy
↧