csv-injection-vulnerable-php-script-/index.php at master · securelayer7/csv-injection-vulnerable-php-script- · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
<?php
session_start();
if(isset($_SESSION['usr_id']) == "") {
	header("Location: login.php");
}
include_once 'dbconnect.php';

$login_id = $_SESSION['usr_id'];
$erroroccured = 0;
$success = 0;
$error = "";
$successmsg = "";

if(count($_POST) > 0)
{
	$expensetype = mysqli_real_escape_string($con, $_POST['expensetype']);
	$amount = mysqli_real_escape_string($con, $_POST['amount']);

	if($expensetype == "" || $amount == "")
	{
		$erroroccured = 1;
		$error = "Please Enter Required Fields.";
	}

	if($erroroccured == 0)
	{


		$result = mysqli_query($con, "INSERT INTO expense(users_id,expensetype,amount) VALUES('" . $login_id . "', '" . $expensetype . "', '" . $amount . "')");
		if($result)
		{
			$success = 1;
			$successmsg = "Expense Successfully Added";
		}
		else
		{
			$erroroccured = 1;
			$error = "Error adding expense...Please try again later!";
		}
	}

}


?>
<!DOCTYPE html>
<html>
<head>
	<title>Home</title>
	<meta content="width=device-width, initial-scale=1.0" name="viewport" >
	<link rel="stylesheet" href="css/bootstrap.min.css" type="text/css" />
</head>
<body>

<nav class="navbar navbar-default" role="navigation">
	<div class="container-fluid">
		<div class="navbar-header">
			<button type="button" class="navbar-toggle" data-toggle="collapse" data-target="#navbar1">
				<span class="sr-only">Toggle navigation</span>
				<span class="icon-bar"></span>
				<span class="icon-bar"></span>
				<span class="icon-bar"></span>
			</button>
			<a class="navbar-brand" href="index.php">Home</a>
		</div>
		<div class="collapse navbar-collapse" id="navbar1">
			<ul class="nav navbar-nav navbar-right">
				<?php if (isset($_SESSION['usr_id'])) { ?>
				<li><p class="navbar-text">Signed in as <?php echo $_SESSION['usr_name']; ?></p></li>
				<li><a href="logout.php">Log Out</a></li>
				<?php } else { ?>
				<li><a href="login.php">Login</a></li>
				<li><a href="register.php">Sign Up</a></li>
				<?php } ?>
			</ul>
		</div>
	</div>
</nav>
<!-- side bar -->

    <div class="col-lg-2">
      <ul class="navbar-default nav" style="height:650px">
        <li class="active"><a href="index.php">Add Records</a></li>
        <li><a href="view_record.php"> View Records</a></li>
      </ul>
    </div>


	<div class="col-md-4">
		<form action="" method="POST" role="form">
			<legend>Add Expenses</legend>

			<div class="form-group">
				<label for="expensetype">Expense Type</label>
				<input type="text" class="form-control" id="expensetype" name="expensetype" placeholder="XYZ" REQUIRED>
			</div>
			<div class="form-group">
				<label for="amount">Amount</label>
				<input type="text" class="form-control" id="amount" name="amount" placeholder="100..." pattern="[0-9]{3}" title="Please Enter Only Numbers (1-1000)" REQUIRED>
			</div>

			<button type="submit" class="btn btn-primary">Submit</button>
			<button type="reset" class="btn btn-warning">Reset</button>
		</form>		<br/>

	<?php
		if($erroroccured == 1)
		{
	?>
		<div class="alert alert-danger">
			<button type="button" class="close" data-dismiss="alert" aria-hidden="true">&times;</button>
			<strong><?php echo $error;?></strong>
		</div>

	<?php
		}
		if($success == 1)
		{
	?>
		<div class="alert alert-success">
			<button type="button" class="close" data-dismiss="alert" aria-hidden="true">&times;</button>
			<strong><?php echo $successmsg;?></strong>
		</div>
	<?php
		}
	?>


	</div>


<!-- side bar ends -->

<script src="js/jquery-1.10.2.js"></script>
<script src="js/bootstrap.min.js"></script>
</body>
</html>