Re: URL injection

2009/6/4 Morris <morris520@gmail.com>: > Hi > > The register.php has only a form > > <?php > <form name="registerUser" action="register.php" > method="post"> > <input type="text" name="username" size="10" /> > <input type="submit" value="send" /> > </form> > ?> > > Does this help ? 1) That is not valid PHP code. 2) Even if it were there's nothing in there that would be exploitable through the URL you sent in your first email. -Stuart -- http://stut.net/ > 2009/6/4 Stuart <stuttle@gmail.com> >> >> 2009/6/4 Morris <morris520@gmail.com>: >> > Hi >> > >> > Can anyone help me handel this URL injection ? >> > >> > https://www.xxx.co.uk/register.php"| grep "123" >> > >> > I want to detect it and header back to my index page. >> > >> > It's quite urgent >> >> What the smeg is register.php doing that makes it execute that?? Show >> us the code. >> >> -Stuart >> >> -- >> http://stut.net/ > >