dimanche 1 mars 2015

PHP strpos and strlen Bypass



This is from a CTF event that has ended, but a writeup has not been done for it yet, and I'm quite curious as to how it would be done.


With this code:



$a = $_GET["pl"];
if(isset($a)) {
if(strpos($a,"ans") !== false && strlen($a) < 2) {


What value for $a would pass both of those if statements?





Aucun commentaire:

Enregistrer un commentaire