html code will not echo

@eval_BadCode_Apr 23.2011 — #A few notes:

Be careful about LFI (Local File Inclusion) and RFI (Remote File Inclusion), they are vulnerabilities that may let an attacker abuse a page which misuses file_get_contents() by not validating input (file location).

file_get_contents has 1 mandatory argument: the filename. This function will look in the immediate path for the file (the same directory as the executed script itself), unless the filename is an absolute path or some of the optional arguments are used.

The function returns a string.

So we need 2 files... actually we only need 1 file ?

yourPHPpage.php (live example: http://vircaelum.net/filegetcontents.php )

[code=php]
 <?php
 
 echo "<pre>", htmlentities(file_get_contents($_SERVER[SCRIPT_FILENAME])), "</pre>";
 
 ?>
 [/code]

Worked for me...

Edit:

If you need help with the ajax part, you should post it in the "Javascript" forum.

html code will not echo

1 Comments(s) _↴

Also in #PHP _↴

Success!

Social

Version

html code will not echo

1 Comments(s) ↴

Also in #PHP ↴

Success!

The web is an endless sea of information. Don't miss the boat... Subscribe!

Social

Version

1 Comments(s) _↴

Also in #PHP _↴