RE: [PHP] JavaScript Injection ???
| From: | Ashley Sheridan | Date: | Mon, 18 Apr 2011 18:24:27 +0000 |
| Subject: | RE: [PHP] JavaScript Injection ??? | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-312440@lists.php.net to get a copy of this message | ||
On Mon, 2011-04-18 at 14:11 -0400, admin@buskirkgraphics.com wrote:
> Yes Alert works fine on my browsers but the hack to change the alert on
> someone else's website has been fixed from browser updates.
>
>
> Richard L. Buskirk
>
> You can't grow your business with systems that are on life support...
>
>
> -----Original Message-----
> From: Jim Giner [mailto:jim.giner@albanyhandball.com]
> Sent: Monday, April 18, 2011 2:03 PM
> To: php-general@lists.php.net
> Subject: Re: [PHP] JavaScript Injection ???
>
>
> <admin@buskirkgraphics.com> wrote in message
> news:005501cbfdeb$457839c0$d068ad40$@com...
> > Javascript:alert("Hello World");
> > The browsers have had many updates since last I seen this work.
> >
>
> ?? You're saying that "alert" doesn't work on your browse? Gee - it works
> on mine.
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
I think it might have something to do with the origin of the data, as
running a quick example file works fine in Fx, Opera, Konqueror and
SeaMonkey on my computer, and even seem to work OK when run from my
local server (same machine but served from Apache instead of through the
local file:// protocol)
One other thing it could be is some sort of security mod (in PHP or
Apache) that is altering the actual HTML and isn't outputting what you
expect.
--
Thanks,
Ash
http://www.ashleysheridan.co.uk