html entities in a PHP code -


i have homework , it's webpage (log-in page) , task enter , bypass login forum, first thing have looked page's source , found if want username should go /page.phps directory , did that. after entering directory redirected page piece of code 

<?php $super_admin_access = false; // set our super-admin level user? if (isset($_get['user'])) {  $user = html_entity_decode($_get['user']);  if ($user === "<root>") {    $super_admin_access = true;  } } ?>  <div class="logo"><img src="../assets/images/challenge-priserv-logo.svg" alt="nethub logo"></div>  <div class="login">   <form class="form" onsubmit="dologin(); return false">     <div class="message message-error" id="login-error-msg" style="display: none">denied!</div>      <div class="field">       <div class="label">username</div>        <input type="text" name="username">     </div>      <div class="field">       <div class="label">password</div>        <input type="password" name="password">     </div>      <!-- in case forget, details @ page.phps -->      <div class="actions">       <input type="submit" value="access server" class="btn">     </div>   </form> </div>

i don't know if understand php code in right way, firstly though of writing "<root>" in html entity format become &#x22;&#x3c;root&#x3e;&#x22;, there hint saying

did see comment in source code suggesting take @ page.phps? take look. urldecode do? can opposite of urldecode?

so tried login using username "<root>" or encoded 1 &quot;&lt;root&gt;&quot; tried removing quota no luck, don't know if there password or that, appreciate given, :).

seeing piece of homework won't give direct answer, rather point in right direction.

you on right track, seem have gotten little confused how php handles strings.

let me give example. go page login.php?user=tom.

<?php $user = $_get['user']; $desiredusername = "tom"; if ($user === $desiredusername) {     echo "you're in!"; }

let's take @ check if() doing in case.

$desiredusername === "tom"; // true $desiredusername === "frank"; // false $desiredusername === "jonas"; // false

when setting $user variable in code, wrapping <root> quotes so.. "<root>". while php code checks see if $user === "<root>", quotes in case specifying want see if $user contains string <root>.

test method of using encoded entities &quot;&lt;root&gt;&quot; , without quotes on either side , see happens.


Comments

Post a Comment

Popular posts from this blog

javascript - jQuery: Add class depending on URL in the best way -

i have html progress meter: <div class="col-md-3" style="margin-left: -20px;"> <div class="progress-pos active" id="progess-1"> <div class="progress-pos-inner"> login </div> </div> </div> <div class="col-md-3 progress-pos-container"> <div class="progress-pos" id="progess-2"> <div class="progress-pos-inner"> scan items </div> </div> </div> <div class="col-md-3 progress-pos-container"> <div class="progress-pos" id="progess-3"> <div class="progress-pos-inner"> confirm address </div> </div> </div> <div class="col-md-3 progress-pos-container"> <div class="progress-pos" id="progess-4"> <div class="progress-pos-in
Read more

caching - How to check if a url path exists in the service worker cache -

i need check if particular url path exists in service worker cache. example, suppose url is: /myserviceworker/service?a=110&b=70 this url exists in cache, there many of them different values of , b. now, suppose want refresh of these urls, how can that? i want know how access key values service worker cache. if know key, plan follows: var url = new url(key); if(url.pathname === "\/myserviceworker/service") refetch key but not sure how cache key , in format is. mean, string or url? cache api has match() method returns promise resolving in response object if match or undefined if no match exists. second parameter object can specify ignoresearch not take account url parameters. the ignoresearch option supported firefox ( chrome status here ). in other hand, retrieve cache entries, can use keys() method.
Read more

Redirect to a HTTPS version using .htaccess -

i need modify .htaccess file redirect urls https version without "www". http://example.com --> https://example.com http://www.example.com --> https://example.com https://www.example.com --> https://example.com this how .htaccess file looks like: rewriteengine on rewritecond %{request_filename} !-d rewritecond %{request_filename} !-f rewriterule ^(.*)$ redirect.php?id=$1&page=$2 [qsa,l] what modifications need make .htaccess in order forward https without "www"? it depends on doing current code. looks file called redirect trying display php page seo friendly url. think might confusing people. anyway, need , force https without www, need 1 more rule above. also second rule needs two capture groups in rewriterule test string because wanting 2 different values using $1 , $2 references. rewriteengine on #rediect www non www and/or http https --- combinations. rewritecond %{http_host} !^example\.com [nc,or] rewritecond %{https} !^
Read more