ok ive tryed but im stumped (php)

denby

denby

denby

Associate
Joined
1 Mar 2006
Posts
425
have a php file like this that was written with the help of people on here

PHP: 
 <OBJECT ID="ChatFrame" CLASSID="CLSID:8C2B40CD-C2A1-4B48-8FFE-00804230846A'
CODEBASE="chat2.CAB">
<?php
 foreach ($_GET as $param => $value) {
  printf('<PARAM NAME="%s" value="%s">%s',$param,$value,"\n");
  }
 ?>
</object>

and it works kinda..but the chatcontrol loads but the ie window is white still.
i know that the ocx is loading but its not visible .. becuase only the param names are being printed?

is there a way to printf html code?

i tryed something like this

PHP: 
$data ("<OBJECT ID="ChatFrame" CLASSID="CLSID:8C2B40CD-C2A1-4B48-8FFE codebase=chat2.cab">

prinf ($data)

didnt work

ima php n00b BTW
 
do this after the params:

PHP: 
print '<OBJECT ID="ChatFrame" CLASSID="CLSID:8C2B40CD-C2A1-4B48-8FFE codebase=chat2.cab';
 
Last edited:
seeld3.jpg


<?php
print '<OBJECT ID="ChatFrame" CLASSID="CLSID:8C2B40CD-C2A1-4B48-8FFE-00804230846A" CODEBASE="chat2.CAB">';

foreach ($_GET as $param => $value) {
printf('<PARAM NAME="%s" value="%s">%s',$param,$value,"\n");
}
?>



?>
Click to expand...

and it creates

<OBJECT ID="ChatFrame" CLASSID="CLSID:8C2B40CD-C2A1-4B48-8FFE-00804230846A" CODEBASE="chat2.CAB"><PARAM NAME="Server" value="irc.amcool.net">
<PARAM NAME="NickName" value="D3nby">
<PARAM NAME="RoomName" value="general">
Click to expand...
 
Last edited:
Code: 
<OBJECT ID="ChatFrame" CLASSID="CLSID:8C2B40CD-C2A1-4B48-8FFE-00804230846A'
CODEBASE="chat2.CAB">
<?php
foreach ($_GET as $param => $value) {
    echo '<PARAM NAME=".$param." value="'.$value.'">';
    echo "\n";
}
?>
</object>

you already got the answer multiple times in your last thread about this.

then obviously you'd have to access the page like this....

Code: 
index.php?param1=value1&param2=value2
 
Last edited:
read above mate

it works but check the picture

the prinf overrules the html part

so the control loads but you cant see it
 
well first of all you need to handcode the html that makes it work. then think about using php to generate it when it does?

removed edit. just notice the html output above. that should be want you want??? :confused:
 
Last edited:
ok - forget PHP for a min
what should it look like in normal HTML?how does the source look different when done in php

And yes major xss, but lets get the PHP fixed first
 
^ when you view the source the html is correct..

but i think becuase were using printf its doing that over the top of mi ocx
 
what? all the php is generating the code in your html source. if using "view source" is showing the expected code then something else is wrong.
 
You must log in or register to reply here.
Back
Top Bottom