diff options
Diffstat (limited to 'xss/index.php')
| -rw-r--r-- | xss/index.php | 36 |
1 files changed, 0 insertions, 36 deletions
diff --git a/xss/index.php b/xss/index.php deleted file mode 100644 index e645517..0000000 --- a/xss/index.php +++ /dev/null @@ -1,36 +0,0 @@ -<?php - class MyDB extends SQLite3 { - function __construct() { - $this->open('comments.db'); - } - } - - if (isset($_POST['user'], $_POST['comment'])) { - $user = $_POST['user']; - $comment = $_POST['comment']; - - $db = new MyDB(); - - $sql = 'INSERT INTO Comments VALUES(\'' . $user . '\',\'' . $comment . '\')'; - $ret = $db->exec($sql); - $db->close(); - } - - echo '<!DOCTYPE HTML><html><head><title>Comments</title>' . - '<meta charset="utf-8"></head><body><h1>Comments</h1>'; - < |