diff options
Diffstat (limited to 'xss')
| -rw-r--r-- | xss/comments.db | bin | 0 -> 8192 bytes | |||
| -rw-r--r-- | xss/index.php | 36 |
2 files changed, 36 insertions, 0 deletions
diff --git a/xss/comments.db b/xss/comments.db Binary files differnew file mode 100644 index 0000000..32114c2 --- /dev/null +++ b/xss/comments.db diff --git a/xss/index.php b/xss/index.php new file mode 100644 index 0000000..e645517 --- /dev/null +++ b/xss/index.php @@ -0,0 +1,36 @@ +<?php + class MyDB extends SQLite3 { + function __construct() { + $this->open('comments.db'); + } + } + + if (isset($_POST['user'], $_POST['comment'])) { + $user = $_POST['user']; + $comment = $_POST['comment']; + + $db = new MyDB(); + + $sql = 'INSERT INTO Comments VALUES(\'' . $user . '\',\'' . $comment . '\')'; + $ret = $db->exec($sql); |