dink87522 Posted August 26, 2009 Share Posted August 26, 2009 index.php?option=AAA how do I find what other options are available? i.e. BBB if it exists etc? Quote Link to comment Share on other sites More sharing options...
.josh Posted August 26, 2009 Share Posted August 26, 2009 echo $_GET['option']; Quote Link to comment Share on other sites More sharing options...
dink87522 Posted August 26, 2009 Author Share Posted August 26, 2009 I don;t knwo the name of the option. Quote Link to comment Share on other sites More sharing options...
dink87522 Posted August 26, 2009 Author Share Posted August 26, 2009 I don't knwo the options. Quote Link to comment Share on other sites More sharing options...
.josh Posted August 26, 2009 Share Posted August 26, 2009 but what are you expecting it to be? You can't just randomly take whatever comes in the door. Well I guess you could, but that's begging to get exploited. Are you expecting it to be a certain exact value in a predefined list? Are you expecting it to be something of a specific format? What are you wanting to do with this? Quote Link to comment Share on other sites More sharing options...
oni-kun Posted August 26, 2009 Share Posted August 26, 2009 Well this will get options=ANYTHING $option = $_GET['options'] If you're wanting to extract XXX=XXX&YYY=ZZZ, without knowing the names.. http://us3.php.net/manual/en/reserved.variables.server.php Look there for one of the variables that lists the query string.. you can use regex or explode to extract the GET's.. Quote Link to comment Share on other sites More sharing options...
dink87522 Posted August 26, 2009 Author Share Posted August 26, 2009 This is on another server, not mine. Quote Link to comment Share on other sites More sharing options...
.josh Posted August 26, 2009 Share Posted August 26, 2009 that doesn't answer any of the questions I asked. Dude, all I'm getting out of you is that you have this random variable being passed through the url. you have no idea what the value will be. you have no idea what you are wanting to do with it. Why do you want to find out what the options are? If you cannot answer this question (or the ones I asked before), then why did you even make a thread? you have to tell us these things if you want help. We are not psychic. Quote Link to comment Share on other sites More sharing options...
Psycho Posted August 26, 2009 Share Posted August 26, 2009 This is actually a very simple problem to solve, which only takes 4 steps 1. Get a cup of coffee or red bull (well, get a lot actually) 2. Using the URL add the letter 'a' as the parameter (or, idealy, start at the lowest character code) 3. Submit the URL and see if a page appears with the expected output 4. Increment the character used (or add another character if att he last character code) then repeat from step 2 (about 1 billion times) Quote Link to comment Share on other sites More sharing options...
ram4nd Posted August 26, 2009 Share Posted August 26, 2009 You can do something with iframes to speed up the process. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.