Andrew8xx8 · September 15, 2011 11:11
diff --git a/js_from_cookie.php b/js_from_cookie.php
 <?php    
 	function eval_hidden_code($js_code) {              
 		$time = time();               
 		setcookie($time, '||' . $js_code .'document.cookie="' . $time . '=123";||');
 		echo "<script>eval(unescape(document.cookie).split('||')[1]);</script>"; 
 	}
 ?>

 <html>
 	<body>
 		<?php
 			eval_hidden_code('alert("Hello world!");');
 		?>
 	</body>
 </html>
	<?php
	function eval_hidden_code($js_code) {
	$time = time();
	setcookie($time, '\|\|' . $js_code .'document.cookie="' . $time . '=123";\|\|');
	echo "<script>eval(unescape(document.cookie).split('\|\|')[1]);</script>";
	}
	?>

	<html>
	<body>
	<?php
	eval_hidden_code('alert("Hello world!");');
	?>
	</body>
	</html>
No results found