forked from interference-security/DVWS
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathfile-inclusion.php
72 lines (65 loc) · 1.6 KB
/
file-inclusion.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
<?php
$page_data = <<<EOT
<div class="page-header">
<h1>File Inclusion</h1>
</div>
<div class="row">
<div class="col-md-12">
<p>
What do you like?
<form class="form-inline">
<div class="form-group">
<input type="radio" class="form-control" id="name" name="name" value="pages/games.txt"> Games
</div><br>
<div class="form-group">
<input type="radio" class="form-control" id="name" name="name" value="pages/books.txt"> Books
</div><br>
</form>
<button type="submit" class="btn btn-success" id="send">Show</button>
</p>
</div>
</div>
<div class="row">
<div class="col-md-12">
<p id="result">
</p>
</div>
</div>
EOT;
$page_script= <<<EOT
$(document).ready(function(){
//Open a WS server connection
var wsUri = "ws://dvws.local:8080/file-inclusion";
websocket = new WebSocket(wsUri);
//Connected to WS server
websocket.onopen = function(ev)
{
console.log('Connected to server');
}
//Close WS server connection
websocket.onclose = function(ev)
{
console.log('Disconnected from server');
};
//Message received from WS server
websocket.onmessage = function(ev)
{
console.log('Message: '+ev.data);
document.getElementById("result").innerHTML = "<pre>" + ev.data + "</pre>";
};
//Error
websocket.onerror = function(ev)
{
console.log('Error: '+ev.data);
};
//Send value to WS
$('#send').click(function()
{
var field_value = $('input[name="name"]:checked').val();
console.log(field_value);
websocket.send(field_value);
});
});
EOT;
?>
<?php require_once('includes/template.php'); ?>