safeLoad();
// Use environment variables for the database password and IP address.
$db_pass = $_ENV['DATABASE_PASSWORD'];
$ip_addr = $_ENV['IP_ADDRESS'];
// Make some constants
if ($_SERVER['HTTP_HOST'] == 'localhost') {
define('HOST', 'localhost');
define('USER', 'root');
define('PASS', $db_pass);
define('DB', 'insecure');
} else {
define('HOST', $ip_addr);
define('USER', 'root');
define('PASS', $db_pass);
define('DB', 'insecure');
}
if (isset($_POST['username']) && isset($_POST['password'])) {
$username = $_POST['username'];
$password = $_POST['password'];
// Connect to the DB
$conn = mysqli_connect(HOST, USER, PASS, DB);
// Write a DB query
$sql = 'SELECT password FROM users WHERE username = "' . $username . ' ";';
// Run DB query
$results = mysqli_query($conn, $sql);
if (mysqli_num_rows($results) == 0) {
$_GET['error'] = true;
} else {
$row = mysqli_fetch_assoc($results);
if ($row['password'] == $password) {
$_SESSION['access'] = true;
$_GET['file'] = 'includes/fbi.txt';
} else {
$_GET['error'] = true;
}
}
}
if (isset($_GET['logout'])) {
$_SESSION['access'] = false;
header('Location: .');
}
?>
Spies
View Confidential Information
Access Denied.
Invalid username or password.
';
}
echo '
';
} else if (isset($_GET['file']) && isset($_SESSION['access'])) {
echo '
Access Granted.
';
fileRead($_GET['file']);
}
?>
><<||', $string);
echo '
| Agent |
Codename |
';
foreach ($values as $v) {
list($a, $b) = explode(',', $v);
echo '
| ' . ucfirst($a) . ' |
' . ucwords($b) . ' |
';
}
echo '
';
}
?>