As you can see here to register a get request?

echo '<meta http-equiv="refresh" content="0;URL=/shablon.php?id here you need to register a get request, but how to do it? ">';
June 27th 19 at 15:18
1 answer
June 27th 19 at 15:20
Solution
So?
echo '<meta http-equiv="refresh" content="0;URL=/shablon.php?'.$_GET.'">';


Only keep in mind that a straight insert transferred the settings unsafe.
Try:
$_GET = '<script>alert("XSS")</script>';
echo '<meta http-equiv="refresh" content="0;URL=/shablon.php?'.$_GET.'">';

you need to clean POST and GET start here for example https://habrahabr.ru/post/143035/
Yes, thank you, and cleaned them both? encode?) - humberto.Wuckert18 commented on June 27th 19 at 15:23
Edited comments above.
Search for "php cleaning user data"
for example the most simple
http:// php720 . com/lesson/45 (remove the spaces) - hipolito_Trantow20 commented on June 27th 19 at 15:26
Otherwise, you and the base will break the perch and XSS. - hipolito_Trantow20 commented on June 27th 19 at 15:29
Well, actually the insert I was wrong $_GET['id'] should be, and not just the $_GET - hipolito_Trantow20 commented on June 27th 19 at 15:32
: Yes, I myself added, thanks for the replies - humberto.Wuckert18 commented on June 27th 19 at 15:35

Find more questions by tags PHP