dbxapp 4.1.3
CMS, Shop, Workflows und modulare Geschäftsanwendungen
Loading...
Searching...
No Matches
dbxSearchTemplate_test.php File Reference

Go to the source code of this file.

Variables

 $form = dbx()->get_system_obj('dbxForm')
 $token
 $norepKey = trim((string)$token, '[]')
 $html = (string)($_SESSION['dbx']['norep'][$norepKey] ?? '')
if($html==='') if(strpos( $html, '< strong >Suche</strong >')===false) if(strpos($html, 'value="&quot;&gt;&lt;script&gt;alert(1)&lt;/script&gt;"')===false) if(strpos( $html, '&amp;quot;') !==false||strpos( $html, '&amp;lt;') !==false) if(strpos($html, 'value="">< script >alert(1)</script >') !==false) if(strpos( $html, 'id="probe_7"')===false||strpos( $html, 'for="probe_7"')===false) if (strpos( $html, 'class="dbx-search-icon"')===false||strpos( $html, 'class="dbx-clear-btn"')===false)

Variable Documentation

◆ $form

$form = dbx()->get_system_obj('dbxForm')

Definition at line 6 of file dbxSearchTemplate_test.php.

◆ $html

◆ $norepKey

$norepKey = trim((string)$token, '[]')

Definition at line 20 of file dbxSearchTemplate_test.php.

◆ $token

$token
Initial value:
= $form->create_fld(array(
'name' => 'probe',
'tpl' => 'dbx|search',
'data' => array(
'name' => 'probe',
'label' => '<strong>Suche</strong>',
),
'options' => array(),
'value' => '"><script>alert(1)</script>',
'error' => 0,
'verify' => 1,
), 7)

Definition at line 7 of file dbxSearchTemplate_test.php.

Referenced by dbx\dbxKi\dbxKiCmsService\bundleCheckExecuteToken(), dbx\dbxShop\dbxShopPayPal\capture(), check_action_token(), dbx\dbxShop\dbxShopPayPal\createOrder(), dbxDoxygenTutorialLabel(), dbxForm\get_security_data(), dbx\dbxKi\dbxKiDesignService\handleImport(), dbx\dbxKi\dbxKiBundleService\handleProcess(), and dbx\dbxLogin\register\run().

◆ if

if( $html==='') if(strpos($html, '< strong >Suche</strong >')===false) if(strpos( $html, 'value="&quot;&gt;&lt;script&gt;alert(1)&lt;/script&gt;"')===false) if(strpos($html, '&amp;quot;') !==false||strpos($html, '&amp;lt;') !==false) if(strpos( $html, 'value="">< script >alert(1)</script >') !==false) if(strpos($html, 'id="probe_7"')===false||strpos($html, 'for="probe_7"')===false) if(strpos($html, 'class="dbx-search-icon"')===false||strpos($html, 'class="dbx-clear-btn"')===false) ( strpos( $html, 'class="dbx-search-icon"') = == false || strpos($html, 'class="dbx-clear-btn"') === false)

Definition at line 46 of file dbxSearchTemplate_test.php.