473,800 Members | 2,475 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

javascript content in $_POST

Hi,

I am trying to post a javascript content via form textarea input
element.
But when i click send (post) the posted page comes unaccesible.

example content for post :

<script type="text/javascript"
src="http://test.com">
</script>

I think it is about apache or php configuration.

In my local computer , there is no problem.Problem occurs my hosting
environment.
Regards,
--
Gokhan Altinsoy ~= 15000 -->
http://www.itinfomap.com/bilin/perso...iew&itemid=106
Dec 3 '07
14 1998
On Tue, 04 Dec 2007 12:33:46 +0100, Captain Paralytic
<pa**********@y ahoo.comwrote:
On 4 Dec, 10:36, "Rik Wasmus" <luiheidsgoe... @hotmail.comwro te:
>On Tue, 04 Dec 2007 11:34:49 +0100, Rik Wasmus

<luiheidsgoe.. .@hotmail.comwr ote:
On Mon, 03 Dec 2007 20:49:33 +0100, Gökhan Altınsoy
<gokhanaltin... @gmail.comwrote :
copy paste js content and save on
>>http://www.taginternet.com/tagger/testpost.php
>address
I'd day

Huh? "I'd think"... I can't for the life of me trace back how 'day' was
entered there...

Maybe you were gonna say "I'd say" and the "d" and "s" keys are next
to each other (at least they are on my quay bored)
You are offcourse totally correct. A very likely scenario now you mention
it. Luckily english is not my native language so I tend to get away with
oversights like these :).
--
Rik Wasmus
Dec 4 '07 #11
On Dec 4, 12:21 pm, Erwin Moller
<Since_humans_r ead_this_I_am_s pammed_too_m... @spamyourself.c om>
>
Hi,

A wild guess: Maybe your receiving script doesn't escape "?

Try posting this and see what happens:
test with " in it

Does that also produce an error?

And what is more: Be sure you see the error instead of 'Page cannot be
displayed'.

Make sure errorreporting is on.

Good luck.

Regards,
Erwin Moller

I had already tried things that you wrote.
Probably it is a bug of my apache version or php version.

Anyway, thanks. I have solved with using java script.I am replacing
"script" word with
"betikbetikbeti kbetik" :) word before posting.

Dec 4 '07 #12
On Tue, 04 Dec 2007 15:51:32 +0100, Gökhan Altınsoy
<go************ @gmail.comwrote :
On Dec 4, 12:21 pm, Erwin Moller
<Since_humans_r ead_this_I_am_s pammed_too_m... @spamyourself.c om>
>>
Hi,

A wild guess: Maybe your receiving script doesn't escape "?

Try posting this and see what happens:
test with " in it

Does that also produce an error?

And what is more: Be sure you see the error instead of 'Page cannot be
displayed'.

Make sure errorreporting is on.

Good luck.

Regards,
Erwin Moller


I had already tried things that you wrote.
Probably it is a bug of my apache version or php version.
I'm 99.999% sure it's a filter installed by someone somewhere, which
inherently has nothing to do with PHP and/or Apache itself. Seems to me
someone wanted to avoid XSS attacks in some crude way.
--
Rik Wasmus
Dec 4 '07 #13
� wrote:
On Dec 4, 12:21 pm, Erwin Moller
<Since_humans_r ead_this_I_am_s pammed_too_m... @spamyourself.c om>
>Hi,

A wild guess: Maybe your receiving script doesn't escape "?

Try posting this and see what happens:
test with " in it

Does that also produce an error?

And what is more: Be sure you see the error instead of 'Page cannot be
displayed'.

Make sure errorreporting is on.

Good luck.

Regards,
Erwin Moller


I had already tried things that you wrote.
Probably it is a bug of my apache version or php version.

Anyway, thanks. I have solved with using java script.I am replacing
"script" word with
"betikbetikbeti kbetik" :) word before posting.
I have found that using any variable or function name in javascript the
remotely resembles a reserved word that the vendiors particular
implementation of javashite might just conceieavbly have used, reserved,
or simply decided to hang some speciality about is a Bad Idea.

Keep javashite names short, and entirely obsucre. I even had issues with
display_the_one () and display_the_oth er() type clashes. Some
interpreters seemed to discard all beyond the first few characters of
the name as well.
Dec 4 '07 #14
Rik Wasmus wrote:
On Tue, 04 Dec 2007 15:51:32 +0100, Gökhan Altınsoy
<go************ @gmail.comwrote :
>On Dec 4, 12:21 pm, Erwin Moller
<Since_humans_ read_this_I_am_ spammed_too_m.. .@spamyourself. com>
>>>
Hi,

A wild guess: Maybe your receiving script doesn't escape "?

Try posting this and see what happens:
test with " in it

Does that also produce an error?

And what is more: Be sure you see the error instead of 'Page cannot be
displayed'.

Make sure errorreporting is on.

Good luck.

Regards,
Erwin Moller


I had already tried things that you wrote.
Probably it is a bug of my apache version or php version.

I'm 99.999% sure it's a filter installed by someone somewhere, which
inherently has nothing to do with PHP and/or Apache itself. Seems to me
someone wanted to avoid XSS attacks in some crude way.
Dito.
This has nothing to do with PHP-version, php.ini, or Apache. Must be in
the PHP program.

This filter is installed by the original makers, or maybe even by the
original poster and he has memory issues. ;-)

Regards,
Erwin Moller
Dec 5 '07 #15

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

3
8616
by: Phil Powell | last post by:
Has anyone here ever done a case where you have a select multiple form element and you have to do both server-side and client-side validation? I am honestly not sure how to do it in Javascript (I keep getting errors thrown that I can't verify because the form processes onto itself too quickly for me to check the Javascript errors) because the select multiple form element name has to be in the form of "var" because PHP will then recognize...
7
1718
by: Paul Charlton-Thomson | last post by:
Hi! I have nearly cracked this and am stuck on the last bit. I am asking my visitors to rank 8 different items (a,b,c,d,e,f,g,h) from 1 to 10 and then I want to draw a pie chart of those values. My page (draw_pie.php) that draws the pie chart works as it should and I link to it like this ... <A HREF="draw_pie.php?a='.$a.'&b='.$b.'&c='.$c.'&d='.$d.'&e='.$e.'&f='.$f.'&g=' ..$g.'&h='.$h.'">Pie Chart</A>
4
2825
by: Adam Smith | last post by:
Hello, How can I call or trigger an external javascript twice in a form? I have <script language="JavaScript" src="country_state.js" name="Country_State"> <script type="text/javascript" src="country_state.js"> </script>
27
4759
by: Chris | last post by:
Hi, I have a form for uploading documents and inserting the data into a mysql db. I would like to validate the form. I have tried a couple of Javascript form validation functions, but it appears that the data goes straight to the processing page, rather than the javascript seeing if data is missing and popping up an alert. I thought it may be because much of the form is populated with data from the db (lists, etc.), but when I leave...
10
6106
by: IchBin | last post by:
I am trying to set the state of a radio button. I do not see what I am doing wrong. Sorry, I am new at this.. I need another set of eyes to look at this snip of code. I am trying to set the radio button with this link of code: echo 'SCRIPT language=JavaScript setCheckedValue("'.$_SESSION.'");</SCRIPT>'; //? <snip of code>
4
1706
by: Ryan Knopp | last post by:
Two questions. 1) Is there a way i can determine the page was a POST or a GET w/o checking the "?" in the url? 2) Is there a way i can get the POST variables using javascript? (example: like in php $_POST would have info if the page was return as a post with a name field.)
2
3684
by: sufian | last post by:
<input type="image" id="imageField" class="btn" src="<?php bloginfo('template_url'); ?>/media/global/btn-go.gif" onclick = "sendRequestPost(document.getElementById('email1').value);" /> The function sendRequestPost() is in a file named header.php: function sendRequestPost(data) { // Open PHP script for requests MM_validateForm('email1','','RisEmail'); if (document.MM_returnValue) { <?php
6
2457
The1corrupted
by: The1corrupted | last post by:
I don't know if this is the right forum or not, but right now, my Javascript, that is embedded in PHP, is not working! It works everywhere else but not here. HELP!! <?php $soldnumber=$_POST; $cavnumber=$_POST; $artnumber=$_POST; if ($marray==1) { $tanknumber=$_POST;
5
1556
TheServant
by: TheServant | last post by:
Hey there again, I have made a form which allows users to train soldiers depending on whether or not they have the resources. The content concerned is set out like this: -- Header -- -- Info Bar (how much gold etc available) -- -- Form -- -- Footer -- Here is a screen shot: http://supremewarfare.com/main/pics/scrn_shot.jpg
0
9551
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10505
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10035
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9090
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
6813
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5471
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
1
4149
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
3764
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
3
2945
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.