appkr · April 30, 2017 04:00
diff --git a/index.php b/index.php
 <?php

 $id = $_GET['id'] ?? null;
 $sql ="SELECT * FROM posts WHERE id = {$id}";

 ?>

 <!DOCTYPE html>
 <html>
 <head>
    <title>SQL Injection PoC</title>
 </head>
 <body>

 <pre>
    <code><?= $sql; ?></code>
 </pre>

 </body>
 </html>
diff --git a/sql-injection.png b/sql-injection.png
	<?php

	$id = $_GET['id'] ?? null;
	$sql ="SELECT * FROM posts WHERE id = {$id}";

	?>

	<!DOCTYPE html>
	<html>
	<head>
	<title>SQL Injection PoC</title>
	</head>
	<body>

	<pre>
	<code><?= $sql; ?></code>
	</pre>

	</body>
	</html>