Kryptix Posted November 4, 2011 Share Posted November 4, 2011 Er, when you go to page.html/1 on my website it takes the CSS away. Someone found out an XSS exploit as I was taking the page title from the file name, and they done page.html/1/</title><javascript... I noticed on lots of websites you can add / after page names and mess things up. Is there anyway to disable this or a work around using lighttpd? Link to comment https://forums.phpfreaks.com/topic/250414-pagehtml1/ Share on other sites More sharing options...
Pikachu2000 Posted November 4, 2011 Share Posted November 4, 2011 Is register_globals set to On in your php.ini file, by chance? Link to comment https://forums.phpfreaks.com/topic/250414-pagehtml1/#findComment-1284822 Share on other sites More sharing options...
Kryptix Posted November 4, 2011 Author Share Posted November 4, 2011 Is register_globals set to On in your php.ini file, by chance? Nope, they're set to off Link to comment https://forums.phpfreaks.com/topic/250414-pagehtml1/#findComment-1284828 Share on other sites More sharing options...
Kryptix Posted November 5, 2011 Author Share Posted November 5, 2011 Anyone? Link to comment https://forums.phpfreaks.com/topic/250414-pagehtml1/#findComment-1285185 Share on other sites More sharing options...
Pikachu2000 Posted November 5, 2011 Share Posted November 5, 2011 You should probably post the code that exhibits the problem. Link to comment https://forums.phpfreaks.com/topic/250414-pagehtml1/#findComment-1285238 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.