Download Hack security “pro”

$query = "UPDATE users
SET name = '$name',
given name = '$given name',
email = '$email'
WHERE login = 'Crashfr'";
$result = mysql_query($query);
if(!$result){
print "There is an error in the SQL request !!";
}
else{
print "Updating the profile<br>";
print "<a href=\"".$PHP_SELF."\">Cliquez-ici</a> to display your profile";
}
}
else{
$query="SELECT *
FROM users
WHERE login = 'Crashfr'";
$result=mysql_query($query);
$row=mysql_fetch_array($result);
print "Welcome ".$row[login].".<br>";
if($row[level]=="1"){
print "You are administrator";
}
elseif($row[level]=="2"){
print "You are member";
}
else{
print "Error";
}
print "<br><bR>";
print "Updating your profile :<br><br>";
print "<form method=\"POST\" action=\"".$PHP_SELF."\">";
print "Name : <input type=\"text\" name=\"name\" value=\"".$row[name]."\"><br>";
print "Given name : <input type=\"text\" name=\"given name\" value=\"".$row[given name].
"\"><br>";
print "Email : <input type=\"text\" name=\"email\" value=\"".$row[email]."\"><br><br>";
print "<input type=\"submit\" value=\"Update\" name=\”udprofile\">";
print "</form>";
}
mysql_close();
?>
The Hackademy
DMP
-127/209-
SYSDREAM