Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

Can someone explain why this doesnt work?


ghost's Avatar
0 0

Ok, i was looking at some php for a simple md5 hash calculator where the source includes this line: markupmd5($input);

The input it completely unsanitized, so if I input: markupa); phpinfo(

Why does this not make a kind of php injection (if there is such a thing) and show the phpinfo()?

Probably a silly idea but just wondering.

Cheers


richohealey's Avatar
Python Ninja
0 0

Becuase it's still a delimited string.