Extended Basic 7

[netman]

Sounds like preg... but not sure since i tested it with no successful results.

Edit: Ok i solved it. It is not preg. Just find the proper function which sanitizes only "some special characters" like < > and quotes, as our friend told us....

[laklaklak]

Maybe stupid question,but how can we sent to the form with get and grab with post?

[super_]

Maybe stupid question,but how can we sent to the form with get and grab with post?

thats the bug

[BhaaL]

Maybe stupid question,but how can we sent to the form with get and grab with post?

thats the bug

one part of the bug.

[Gazok]

Are the bug and the vuln on the same line?

If they are, and I'm right about which line it is, then the bug can be fixed in so many different ways. I tried to b___n___() it, and fix what I thought the vuln was, but to no avail.

[travmanx]

I keep trying html**t*t**s to prevent against XSS. Can someone point me in the direction as to what to do next. Is this the only line that is bugged/vuln? Only other thing I can think of is to use addslashes() to prevent mysql injections.

Oh yeah I already changed the "way it handles the form".

[mutants_r_us_guild]

I keep trying html**t*t**s to prevent against XSS. Can someone point me in the direction as to what to do next. Is this the only line that is bugged/vuln? Only other thing I can think of is to use addslashes() to prevent mysql injections.

Oh yeah I already changed the "way it handles the form".

close.. but its not html**t*t**s ... try something with a similar name but a tad different Also.. no need to change the "way it handles the form". Just sanitize.

[travmanx]

so its a "special" code . But isn't that the bug part? (switch methods)? Sorry if thats a spoiler I have no clue lol

[Eth3real]

I'm having a hard time figuring this one out.
From what I can tell, it has nothing to do with the method, and it involves XSS.
If that's true, I'm not sure what the bug is, just the vuln. They are on the same line, right?
I think I have the sanitization part right.
Thanks!

[yuri20071]

side note: you should only submit 1 line of code