php-general Digest 25 Apr 2011 19:45:32 -0000 Issue 7283

2011-04-25 Thread php-general-digest-help
php-general Digest 25 Apr 2011 19:45:32 - Issue 7283 Topics (messages 312468 through 312483): Re: str_replace 312468 by: Daniel Brown 312469 by: Daniel Brown 312470 by: Adam Richardson 312471 by: Stuart Dallas 312474 by: Richard Quadling

Re: [PHP] str_replace

2011-04-25 Thread Jim Lucas
On 4/24/2011 8:44 AM, Ron Piggott wrote: I am trying to figure out a syntax that will replace each instance of % with a different letter chosen randomly from the string $puzzle_filler. $puzzle_filler is populated with the letters of the alphabet, roughly in the same ratio as they are

Re: [PHP] JavaScript Injection ???

2011-04-25 Thread Nathan Rixham
Stuart Dallas wrote: On Monday, 18 April 2011 at 20:50, tedd wrote: The form as-is produced a javascript alert() and now it doesn't. This is not a browser change because it's happening before the browser sees the response (try it with curl). It is the browser, chrome will prevent execution

Re: [PHP] str_replace

2011-04-25 Thread Nathan Rixham
Jim Lucas wrote: On 4/24/2011 8:44 AM, Ron Piggott wrote: I am trying to figure out a syntax that will replace each instance of % with a different letter chosen randomly from the string $puzzle_filler. $puzzle_filler is populated with the letters of the alphabet, roughly in the same ratio as

Re: [PHP] JavaScript Injection ???

2011-04-25 Thread Daniel Brown
On Mon, Apr 25, 2011 at 19:12, Nathan Rixham nrix...@gmail.com wrote: It is the browser, chrome will prevent execution because the code was sent in the request, just check the javascript console and you'll see something like:  Refused to execute a JavaScript script. Source code of script

Re: [PHP] JavaScript Injection ???

2011-04-25 Thread tedd
At 7:45 PM -0400 4/25/11, Daniel Brown wrote: On Mon, Apr 25, 2011 at 19:12, Nathan Rixham nrix...@gmail.com wrote: It is the browser, chrome will prevent execution because the code was sent in the request, just check the javascript console and you'll see something like: Refused to