Cross-Site-Scripting Proof of Concept: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
(→Script) |
(→Script) |
||
| Zeile 2: | Zeile 2: | ||
<pre> | <pre> | ||
<?php | <?php | ||
| − | if(isset($ | + | if(isset($_GET['submit'])){ |
| − | $msg = $ | + | $msg = $_GET['msg']; |
} | } | ||
?> | ?> | ||
| Zeile 11: | Zeile 11: | ||
<body> | <body> | ||
<h2>Authentifizierung</h2> | <h2>Authentifizierung</h2> | ||
| − | <form method=" | + | <form method="get"> |
<label for="fname">Input</label><br> | <label for="fname">Input</label><br> | ||
<input type="text" name="msg"><br> | <input type="text" name="msg"><br> | ||
Version vom 28. Juli 2021, 10:54 Uhr
Script
<?php
if(isset($_GET['submit'])){
$msg = $_GET['msg'];
}
?>
<!DOCTYPE html>
<html>
<body>
<h2>Authentifizierung</h2>
<form method="get">
<label for="fname">Input</label><br>
<input type="text" name="msg"><br>
<input type="submit" name="submit" value="klick">
</form>
<br>
<?php
echo "Hello $msg";
?>
</table>
</body>
</html>