PHP ctainted Examples

Example #1

File: test_partial_sources.php Project: NetPainter/aspis

<?php

function fsource()
{
    return "<script> attack!\n";
}
class ctainted
{
    function msource()
    {
        $a = "aa" + "bb";
        return "<script> attack!\n";
    }
}
$v = fsource();
echo $v;
$o = new ctainted();
$v = $o->msource();
echo $v;
$n = "fsource";
$v = $n();
echo $v;
$o = new ctainted();
$n = "msource";
$v = $o->{$n}();
echo $v;

Example #2

File: test_partial_references.php Project: NetPainter/aspis

function fffuntainted()
{
    $o = new ctainted();
    $s = "hello";
    $o->fref($s)->fref($s)->fref($s);
    $o->fref($s)->fref($s);
    $o->fref($s);
    $o->fref($s, " from nick");
    echo "Call-by-ref in an object method: {$s}\n";
    $o = new cuntainted();
    $s = "hello";
    $o->fref($s)->fref($s)->fref($s);
    $o->fref($s)->fref($s);
    $o->fref($s);
    $o->fref($s, " from nick");
    echo "Call-by-ref in an object method: {$s}\n";
}