[PHP] array and strpos Need HELP!

Ramazan said:

I'm trying to make something I can find on websites those words have or not but I can't print which word I have found.
View attachment 176011

Click to expand...

Blackhat Lifter said:

Loop through $crawl with a for or foreach loop. You are now trying to put the method on an array instead of the strings inside the array.

I'm on my phone now, but maybe someone else can type it out.

@Gogol Deleted member 923340

Click to expand...

Ramazan said:

I see I'm not good at those things but trying to make free tools for website owners. If anyone helps me with code I'm really appricaited

Click to expand...

<?php

if (isset($_POST['checker'])) {
    $content = file_get_contents($_POST['checkurl']);
    $content = htmlspecialchars($content);
    $words = [
        'HAPpY', 'Demo', 'Thing'
    ];

    foreach ($words as $word) {
        if (strpos($content, $word) !== false) {
            echo $word . ' found!' . PHP_EOL;
        } else {
            echo $word . ' not found!' . PHP_EOL;
        }
    }
}

TomTheCat said:

PHP:

<?php

if (isset($_POST['checker'])) {
    $content = file_get_contents($_POST['checkurl']);
    $content = htmlspecialchars($content);
    $words = [
        'HAPpY', 'Demo', 'Thing'
    ];

    foreach ($words as $word) {
        if (strpos($content, $word) !== false) {
            echo $word . ' found!' . PHP_EOL;
        } else {
            echo $word . ' not found!' . PHP_EOL;
        }
    }
}

Next time, post the code inside CODE tags, not as image

Click to expand...

TomTheCat said:

PHP:

<?php

if (isset($_POST['checker'])) {
    $content = file_get_contents($_POST['checkurl']);
    $content = htmlspecialchars($content);
    $words = [
        'HAPpY', 'Demo', 'Thing'
    ];

    foreach ($words as $word) {
        if (strpos($content, $word) !== false) {
            echo $word . ' found!' . PHP_EOL;
        } else {
            echo $word . ' not found!' . PHP_EOL;
        }
    }
}

Next time, post the code inside CODE tags, not as image

Click to expand...

TomTheCat said:

PHP:

<?php

if (isset($_POST['checker'])) {
    $content = file_get_contents($_POST['checkurl']);
    $content = htmlspecialchars($content);
    $words = [
        'HAPpY', 'Demo', 'Thing'
    ];

    foreach ($words as $word) {
        if (strpos($content, $word) !== false) {
            echo $word . ' found!' . PHP_EOL;
        } else {
            echo $word . ' not found!' . PHP_EOL;
        }
    }
}

Next time, post the code inside CODE tags, not as image

Click to expand...

Gogol said:

Should work, however...

That file_get_contents call may (and will) result in LFI attack.
It's unsanitized user input.

For example what if I send / etc / passwd (remove spaces, cf is weird) as the checkurl?

Click to expand...

Gogol said:

Should work, however...

That file_get_contents call may (and will) result in LFI attack.
It's unsanitized user input.

For example what if I send / etc / passwd (remove spaces, cf is weird) as the checkurl?

Click to expand...

<form action="page.php" method="POST">
      <input type="text" name="checkurl">
      <button name="checker">Check</button>
    </form>

Ramazan said:

HTML:

<form action="page.php" method="POST">
      <input type="text" name="checkurl">
      <button name="checker">Check</button>
    </form>

I'm using like this. There is no db connection or something. Only one-page work for this.

Click to expand...

Gogol said:

Should work, however...

That file_get_contents call may (and will) result in LFI attack.
It's unsanitized user input.

For example what if I send / etc / passwd (remove spaces, cf is weird) as the checkurl?

Click to expand...

TomTheCat said:

He should turn on open_basedir

Click to expand...