Paul
/
Security-VM
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Added vulnerable login logic

Browse Source
Paul Wagener 12 years ago
parent 188746108b
commit c9db321a9a
1 changed files with 47 additions and 42 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 89
      bank/index.php

89
bank/index.php
Unescape View File

@ -34,54 +34,59 @@
<hr /> <hr />
<div class="span4 signin-container">
<form class="form-signin">
<h3 class="form-signin-heading">Inloggen Mijn Poespas</h3>
<input type="text" class="input-block-level" placeholder="Gebruikersnaam">
<input type="text" class="input-block-level" placeholder="Wachtwoord">
<button class="btn btn-primary" type="submit">Inloggen</button>
</form>
</div>
<?php <?php
if($_POST) {
/** /**
* Maak verbinding met de database * Maak verbinding met de database
*/ */
$connection = mysql_connect('localhost', 'webshop', 'pass') $connection = mysql_connect('localhost', 'bank', 'pass')
or die('Kan geen verbinding maken met MySQL'); or die('Kan geen verbinding maken met MySQL');
$db = mysql_select_db('webshop_sql1', $connection) $db = mysql_select_db('bank', $connection)
or die('Kan de database niet selecteren'); or die('Kan de database niet selecteren');
/**
$result = mysql_query("SELECT * FROM producten") * Zoek gebruiker in de database met de juiste gebruikersnaam en wachtwoord
or die('Query error: ' . mysql_error()); */
$query = "SELECT * FROM gebruikers WHERE gebruikersnaam = '" . $_POST['gebruikersnaam'] . "' AND wachtwoord = '" . $_POST['wachtwoord'] . "'";
while ($row = mysql_fetch_array($result)) {
$result = mysql_query($query)
or die('<div class="alert alert-danger">Query error: <pre>' . mysql_error() . '</pre>Query: <code>' . $query . '</code> </div>');
/**
* Kijk of de query iets heeft teruggegeven. Anders geven we een error
*/
if(mysql_num_rows($result) == 0) {
die('<div class="alert alert-danger">Inlog gegevens niet correct</div>');
} else {
/**
* Gebruiker heeft correct ingelogd. Laat zijn balans zien
*/
$row = mysql_fetch_array($result);
echo "<div class=\"well\">Welkom terug " . $row['gebruikersnaam'] . "! ";
echo "Uw balans is op dit moment: <b>" . $row['balans'] . "</b></div>";
}
mysql_close($connection);
} else {
/**
* Laat inlogformulier zien
*/
?> ?>
<div class="span4 signin-container">
<li class="span3"> <form class="form-signin" method="POST">
<div class="thumbnail"> <h3 class="form-signin-heading">Inloggen Mijn Poespas</h3>
<a href="product_detail.php?id=<?php echo $row['id'] ?>"><img src="/themes/images/products/<?php echo $row['afbeelding']; ?>" alt=""/></a> <input type="text" name="gebruikersnaam" class="input-block-level" placeholder="Gebruikersnaam">
<div class="caption"> <input type="text" name="wachtwoord" class="input-block-level" placeholder="Wachtwoord">
<h5><?php echo $row['naam']?></h5> <button class="btn btn-primary" type="submit">Inloggen</button>
<p> </form>
<?php echo $row['beschrijving'] ?> </div>
</p>
<h4 style="text-align:center"><a class="btn btn-primary" href="product_detail.php?id=<?php echo $row['id'] ?>">&euro;<?php echo $row['prijs'] ?></a></h4>
</div>
</div>
</li>
<?php <?php
} }
mysql_close($connection);
?> ?>
</ul> </ul>
<hr class="soft"/> <hr class="soft"/>

Write Preview
Loading…
Cancel
Save