null byte injection

[axew3]

I've find out "interesting" these readings today:

http://www.madirish.net/401
https://www.php.net/manual/en/security ... lbytes.php
https://resources.infosecinstitute.com/ ... ction-php/

Code: Select all

$input = str_replace(chr(0), '', $input); // remember ever to remove null bytes from input