cookie poisoning
cookie-poison.php
cookie-poison-server.php
$qty=$_POST['qty'];
$disc1=$_COOKIE['disc1'];
$disc2=$_COOKIE['disc2'];
$price=1000;
if($qty==1){
$fprice=($price*$qty)-$disc1;
echo "OK";
echo "Final price is ".$fprice;
}else{
$fprice=($price*$qty)-$disc2;
echo "Final price is ".$fprice;
echo "Bye";
}
?>
0 comments:
Post a Comment