MySQL通用查询程序

来源：互联网发布：sql注入攻防入门详解编辑：程序博客网时间：2024/05/17 09:27

if(get_magic_quotes_gpc()==1){
   ?>
<html>
<head><title>MySQL通用查询程序</title></head>
<body>
注意本程序需要将PHP配置文件(PHP3为php3.ini,PHP4为php.ini)中的magic_quotes_gpc
设成Off或0,修改后请重新启动Apache.
</body>
</html>
   <?
   exit();
}

set_magic_quotes_runtime(0);

$host = 'localhost';
$db = 'test';
$user = 'test';
$pass = '';

// [ php/inc/str2url.php ] cvs 1.2
function str2url($path){
   return eregi_replace("%2f","/",urlencode($path));
}
?>

<html>
<head><title>MySQL通用查询程序</title></head>
<body>

<form action="<?echo str2url($PHP_SELF);?>" method="post">
请输入SQL语句:<br>
<textarea name="sql" cols="100" rows="5"><?echo $sql;?></textarea><br>
<input type="submit" name="cmd" value="查询">
<input type="submit" name="cmd" value="执行">
</form>

<?
if($cmd){
   $con = MySQL_pconnect($host,$user,$pass) or die('无法连接'.$host.'服务器');
   MySQL_select_db($db,$con) or die('无法连接'.$db.'数据库');
   $rst = MySQL_query($sql,$con) or die($sql.'出错');
   if($cmd=='查询'){
      $num_fields = MySQL_num_fields($rst);
      echo '<hr>';
      echo '<table border="1" cellpadding="0" cellspacing="0">';
      echo '<caption align="center">'.$sql.'</option>';
      echo '<tr>';
      for($i=0;$i<$num_fields;$i++) echo '<th> '.MySQL_field_name($rst,$i).'</th>';
      echo '</tr>';
      while($row=MySQL_fetch_row($rst)){
         echo '<tr>';
         for($i=0;$i<$num_fields;$i++) echo '<td> '.$row[$i].'</td>';
         echo '</tr>';
      }
      echo '</table>';
      MySQL_free_result($rst);
   }
   else echo '有 '.MySQL_affected_rows($con).' 行受影响';
}
?>

</body>
</html>
<script type="text/javascript"></script><script type="text/javascript"src="http://pagead2.googlesyndication.com/pagead/show_ads.js"></script>