http://binternet.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/HTB/Medium/36.html
isset($_POST['user'])){
$user=$_POST['user'];
$mysqli = new mysqli($dbhost, $dbuser, $dbpass, $dbname);
$sql=$mysqli->prepare("SELECT id, password, mail, role FROM users WHERE username = ?");
$sql->bind_param("s", $user);
$_SESSION['userid']=$id;
$_SESSION['username']=$user;
$dbconn = pg_connect("host=127.0.0.1 dbname=redcross user=www password=aXwrtUO9_aa&");
$res = pg_execute($dbconn, "q2", array($_SESSION['userid'], $ip));
$dbconn =...