Private Crypter - Unique Private Stubs ◆ [#1] PURE RAT v4 // BEST HVNC RAT ◆ 𝕏 Follow us on X ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Coding Web Development › [PHP] How would i make this chat system escape chars?

New Reply 
PHP 

How would i make this chat system escape chars?
JAS
JAS Away
[closed@HF:]
Posts:
1,689
Threads:
349
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
1,102
Dec 30, 2017 12:11 PM (This post was last modified: Dec 30, 2017 04:17 PM by JAS.)
Did this myself by running the posts through another file that cleaned them. Thanks
Charger
Charger Offline
Not Dead
*****
HF V3ndors
Posts:
13,378
Threads:
716
Credibility:
30700
Popularity:
2,448
βytes:
β 0
Game XP:
1,649
Dec 30, 2017 12:35 PM
Give this stackoverflow answer a read:
https://stackoverflow.com/a/31714103
JAS
JAS Away
[closed@HF:]
Posts:
1,689
Threads:
349
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
1,102
Dec 30, 2017 01:37 PM
(Dec 30, 2017 12:35 PM)Charger Wrote:  Give this stackoverflow answer a read:
https://stackoverflow.com/a/31714103

This isnt working, https://pastebin.com/raw/SkMntpXz
Charger
Charger Offline
Not Dead
*****
HF V3ndors
Posts:
13,378
Threads:
716
Credibility:
30700
Popularity:
2,448
βytes:
β 0
Game XP:
1,649
Dec 30, 2017 01:48 PM (This post was last modified: Dec 30, 2017 01:49 PM by Charger.)
(Dec 30, 2017 01:37 PM)JAS Wrote:  This isnt working, https://pastebin.com/raw/SkMntpXz

You didn't call the function anywhere?
And session_start has to be before $data="<b>".$_SESSION['username'].':</b> '.$_POST['chat']."<br>";
and you need to xss_clean the $_POST['chat'] and when you store it.
mehtevas
mehtevas Offline
[closed@HF:]
Posts:
1,031
Threads:
45
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Dec 30, 2017 02:09 PM
(Dec 30, 2017 01:48 PM)Charger Wrote:  You didn't call the function anywhere?
And session_start has to be before $data="<b>".$_SESSION['username'].':</b> '.$_POST['chat']."<br>";
and you need to xss_clean the $_POST['chat'] and when you store it.

also you should "xss_clean" the $_SESSION['username']

otherwhys they can have xss in there names (obv)
Prof. Farnsworth
Prof. Farnsworth Offline
Good news everyone!
***
HF Ub3r
Posts:
869
Threads:
70
Credibility:
100
Popularity:
39
βytes:
β 0
Game XP:
3
Dec 30, 2017 02:44 PM
Basically validate everything that has to do with the user.
Never trust the user.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Javascript]  by Mr. RobotJul 19, 2022 03:16 AM 0 149 Jul 19, 2022 03:16 AM
Last Post: Mr. Robot
[PHP] by chrisnAug 14, 2014 01:04 PM 5 201 Aug 14, 2014 01:04 PM
Last Post: chrisn
[PHP] by z0tpyrkMar 1, 2014 09:54 PM 6 175 Mar 1, 2014 09:54 PM
Last Post: VladHQ