Merge pull request #51 from adriendb/Changes

Two corrections

Author: tcstool

vuln_apps/orderdata.php

@@ -15,7 +15,7 @@
        	$db = $conn->shop;
 		 	$collection = $db->orders;
 		 	$search = $_GET['ordersearch'];
-		 	$js = "function () { var query = '". $ordersearch . "'; return this.id == query;}";
+		 	$js = "function () { var query = '". $search . "'; return this.id == query;}";
 		 	//print $js;
 		 	print '<br/>';
 
@@ -48,4 +48,4 @@
 <?php echo $result; ?>
 </div>
 </body>
-</html>
+</html>

vuln_apps/userdata.php

@@ -11,7 +11,7 @@
 	if (isset($_GET['usersearch']) && !empty($_GET['usersearch'])) {
 		try {
       	$result = "";
-       	$conn = new MongoClient('mongodb://192.168.87.157');
+       	$conn = new MongoClient('mongodb://127.0.0.1');
        	$db = $conn->appUserData;
 		 	$collection = $db->users;
 		 	$search = $_GET['usersearch'];
@@ -47,4 +47,4 @@
 <?php echo $result; ?>
 </div>
 </body>
-</html>
+</html>