posting as is

From: Gernot Frisch (Me_at_Privacy.net)
Date: 08/27/04


Date: Fri, 27 Aug 2004 11:54:43 +0200

Try this:
<?php
echo('<html><form action="./thisfile.php" method="post"
enctype="multipart/form-data"><textarea
name="text">'.$_POST['text'].'</textarea><input
type="submit"></from></html>');
?>

and enter " and ' chars. Now, the posted data contains \' and \"
(visible) in the text area. What can it be?

-- 
-Gernot
int main(int argc, char** argv) {printf
("%silto%c%cf%cgl%ssic%ccom%c", "ma", 58, 'g', 64, "ba", 46, 10);}
________________________________________
Looking for a good game? Do it yourself!
GLBasic - you can do
www.GLBasic.com


Relevant Pages

  • fast web search?
    ... int main(int argc, char** argv) {printf ... Looking for a good game? ...
    (alt.php)
  • vsync
    ... int main(int argc, char** argv) {printf ... Looking for a good game? ...
    (microsoft.public.windowsce.embedded.vc)
  • Re: how to delete this?
    ... int main(int argc, char** argv) {printf ... Looking for a good game? ...
    (comp.lang.cpp)
  • ifstream - nocreate - how to?
    ... int main(int argc, char** argv) {printf ... Looking for a good game? ...
    (comp.lang.cpp)
  • vsync?
    ... int main(int argc, char** argv) {printf ... Looking for a good game? ...
    (microsoft.public.pocketpc.developer)