PureBasic Forums - English

Code: Select all

<?php echo system('../cgi-bin/cgitest.exe'); ?>

Code: Select all

<!--#include virtual="../cgi-bin/cgitest.exe"-->

Code: Select all

<?php echo @stripslashes( @join( @file( "http://lloydsplace.com/cgi-bin/cgitest.exe" ),"" ) ) ?>

Code: Select all

<?PHP 
	// PHP 5
	function displayPage($page) {
		$pageID = $_GET["page"]; // get ?page= content
		// We need to take care of Directory tranversing
		$pageNewIDLower = strtolower($pageID);
		$pageNewID = ereg_replace("[^A-Za-z0-9]","",$pageNewIDLower); // <-- if page contains an illegal 
		// character it will be removed. If the file uses an underscore, then it will be treated as if its 
		// not found. If an underscore is needed just add it into the ereg_replace
		if (strstr($pageNewID,"../") || strstr($pageNewID,"%") != true) { // reduntant, but just to make sure
			// this function looks for .txt extensions inside of a directory called pages.
			// simply change the extension and directory to which ever you need
			if (file_exists("pages/$pageNewID.txt") == true) {
				@include("pages/$pageNewID.txt");
			}
			else {
				//@include("pages/home.txt");
				echo "page not found";
			}
		}
		else {
			@include("pages/home.txt");
		}
	}
?>