Re: [PHP] str_replace

2011-04-25 Thread Jim Lucas
On 4/24/2011 8:44 AM, Ron Piggott wrote: > > I am trying to figure out a syntax that will replace each instance of % with a > different letter chosen randomly from the string $puzzle_filler. > $puzzle_filler > is populated with the letters of the alphabet, roughly in the same ratio as > they > a

Re: [PHP] JavaScript Injection ???

2011-04-25 Thread Nathan Rixham
Stuart Dallas wrote: On Monday, 18 April 2011 at 20:50, tedd wrote: The form "as-is" produced a javascript alert() and now it doesn't. This is not a browser change because it's happening before the browser sees the response (try it with curl). It is the browser, chrome will prevent executio

Re: [PHP] str_replace

2011-04-25 Thread Nathan Rixham
Jim Lucas wrote: On 4/24/2011 8:44 AM, Ron Piggott wrote: I am trying to figure out a syntax that will replace each instance of % with a different letter chosen randomly from the string $puzzle_filler. $puzzle_filler is populated with the letters of the alphabet, roughly in the same ratio as the

Re: [PHP] JavaScript Injection ???

2011-04-25 Thread Daniel Brown
On Mon, Apr 25, 2011 at 19:12, Nathan Rixham wrote: > > It is the browser, chrome will prevent execution because the code was sent > in the request, just check the javascript console and you'll see something > like: > >  "Refused to execute a JavaScript script. Source code of script found within >

Re: [PHP] JavaScript Injection ???

2011-04-25 Thread tedd
At 7:45 PM -0400 4/25/11, Daniel Brown wrote: On Mon, Apr 25, 2011 at 19:12, Nathan Rixham wrote: It is the browser, chrome will prevent execution because the code was sent in the request, just check the javascript console and you'll see something like: "Refused to execute a JavaScript s