Re: URL injection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



2009/6/4 Morris <morris520@xxxxxxxxx>:
> Hi
>
> The register.php has only a form
>
> <?php
> <form name="registerUser" action="register.php" method="post">
> <input type="text" name="username" size="10" />
> <input type="submit" value="send" />
> </form>
> ?>
>
> Does this help ?

1) That is not valid PHP code.

2) Even if it were there's nothing in there that would be exploitable
through the URL you sent in your first email.

-Stuart

-- 
http://stut.net/

> 2009/6/4 Stuart <stuttle@xxxxxxxxx>
>>
>> 2009/6/4 Morris <morris520@xxxxxxxxx>:
>> > Hi
>> >
>> > Can anyone help me handel this URL injection ?
>> >
>> > https://www.xxx.co.uk/register.php";| grep "123"
>> >
>> > I want to detect it and header back to my index page.
>> >
>> > It's quite urgent
>>
>> What the smeg is register.php doing that makes it execute that?? Show
>> us the code.
>>
>> -Stuart
>>
>> --
>> http://stut.net/
>
>

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux